GHSA-9jx5-6pgf-crrp

Withdrawn: scipy memory leak vulnerability

Source: GitHub Advisory Database (reviewed) Moderate CVE-2023-25399

Packages

Ecosystem	Package	Affected	Fixed in
PyPI	scipy	< 1.10.0	1.10.0

Details

As written in the advisory (Markdown source, shown as plain text).

## Withdrawn Advisory This advisory has been withdrawn because it has been found to not be an issue. Please see the issue [here](https://github.com/scipy/scipy/issues/16235#issuecomment-1625361328) for more information. ## Original Description A refcounting issue which leads to potential memory leak was discovered in scipy commit 8627df31ab in `Py_FindObjects()` function.

References

External links from the advisory. They lead to third-party sites.

https://nvd.nist.gov/vuln/detail/CVE-2023-25399 advisory
https://github.com/scipy/scipy/issues/16235 web
https://github.com/scipy/scipy/issues/16235#issuecomment-1625361328 web
https://github.com/scipy/scipy/pull/16397 web
https://github.com/scipy/scipy/commit/9b6521198c4f31d3f9cb525e581bea8e3e77f0a2 web
https://github.com/pypa/advisory-database/tree/main/vulns/scipy/PYSEC-2023-102.yaml web
https://github.com/scipy/scipy package
http://www.square16.org/achievement/cve-2023-25399 web