← Database

CVE-2021-41500

HIGH CVSS: 7.5 Published: 2021-12-17 Modified: 2026-06-17

Description

Incomplete string comparison vulnerability exits in cvxopt.org cvxop <= 1.2.6 in APIs (cvxopt.cholmod.diag, cvxopt.cholmod.getfactor, cvxopt.cholmod.solve, cvxopt.cholmod.spsolve), which allows attackers to conduct Denial of Service attacks by construct fake Capsule objects.

Affected Platforms

Fedoraproject FedoraCvxopt Project Cvxopt

Weakness Type

CWE-697

References