CVE-2023-29824

Name of the Vulnerable Software and Affected Versions SciPy versions prior to 1.8.0

Description A use-after-free issue was discovered in the Py FindObjects() function. The vendor and discoverer indicate that this is not a security issue. The issue is related to the use of memory after it has been freed, which could potentially allow a remote attacker to impact the confidentiality, integrity, and availability of the system.

Recommendations For SciPy versions prior to 1.8.0, update to version 1.8.0 or later to resolve the issue. As a temporary workaround, consider disabling the Py FindObjects() function until a patch is available. However, since the vendor and discoverer indicate that this is not a security issue, the primary recommendation is to update to the latest version.