PT-2021-22895
CVE-2021-4048
·
تاريخ النشر
2021-09-28
·
تاريخ التحديث
2026-09-25
الوصف من
CVSS 3.1
9.1
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Name of the Vulnerable Software and Affected Versions
lapack versions 3.10.0 and earlier
OpenBLAS versions 0.3.18 and earlier
Description
An out-of-bounds read flaw was found in the
CLARRV, DLARRV, SLARRV, and ZLARRV functions. Specially crafted inputs passed to these functions could cause an application using lapack to crash or possibly disclose portions of its memory.Recommendations
For lapack versions 3.10.0 and earlier, update to a version later than 3.10.0.
For OpenBLAS versions 0.3.18 and earlier, update to a version later than 0.3.18.
As a temporary workaround, consider disabling the
CLARRV, DLARRV, SLARRV, and ZLARRV functions until a patch is available. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾