CVE-2014-1859

Name of the Vulnerable Software and Affected Versions NumPy versions prior to 1.8.1

Description The issue allows local users to write to arbitrary files via a symlink attack on a temporary file. This is possible due to vulnerabilities in certain files, including core/tests/test memmap.py, core/tests/test multiarray.py, f2py/f2py2e.py, and lib/tests/test io.py.

Recommendations For versions prior to 1.8.1, update to version 1.8.1 or later to resolve the issue. As a temporary workaround, consider restricting access to temporary files to minimize the risk of exploitation.