CVE-2019-6446Critical severity
← Search results
AUTOMATICALLY VERIFIEDOFFICIAL VENDOR SOURCECOLLECTED 26 SEP 2026
Numpy · AUTOMATIC DISCOVERY
NumPy Lifecycle policy
NumPy is tracked by BlackTree as a software framework or development platform. Its lifecycle page separates release identity, maintenance and security boundaries using the publisher's registered source.
This record passed BlackTree's automatic primary-source checks with a confidence score of 82. It is returned for operational research without requiring routine manual approval. Confirm edition and deployment applicability before acting.
This discovery does not establish a product-specific support or retirement date. A missing date does not mean support continues.
Product overview
NumPy is tracked by BlackTree as a software framework or development platform. Its lifecycle page separates release identity, maintenance and security boundaries using the publisher's registered source.
Main capabilities
- Application development components
- Versioned runtime or build interfaces
- Security and compatibility maintenance
Typical use
Used by software teams to build, run or maintain applications.
Deployment
Included in source projects, application dependencies, build systems or managed runtimes.
This category-level context is generated from the registered product identity. Confirm exact product capabilities on the publisher's page .
Collected lifecycle data
| Product | NumPy |
|---|---|
| Release | Lifecycle policy |
| Start or release | Not extracted |
| Lifecycle boundary | Continuous or not dated in the source |
| Date precision | Unknown |
Known exploited vulnerabilities
Catalogue updated 1 Oct 2026These are product-family matches in the CISA Known Exploited Vulnerabilities catalogue. Confirm the affected product version in the vendor advisory.
No CISA known-exploited entries currently match this mapped product family.
This does not mean the product has no vulnerabilities.
Package vulnerability advisories
Checked 27 Sep 2026OSV advisories are matched through the registered package URL. A package-family match does not prove that the installed release is affected. Check the affected and fixed versions before remediation.
CVE-2014-1858High severity
Arbitrary file write in NumPy
OSV recordCVE-2014-1859High severity
Numpy arbitrary file write via symlink attack
OSV recordCVE-2021-41495High severity
NumPy NULL Pointer Dereference
OSV recordCVE-2021-33430Medium severity
NumPy Buffer Overflow (Disputed)
OSV recordCVE-2021-41496Medium severity
Buffer Copy without Checking Size of Input in NumPy
OSV recordCVE-2019-6446Unknown severity
Vulnerability advisory
OSV recordCVE-2021-41496Unknown severity
Vulnerability advisory
OSV recordSource evidence
PRIMARYManual
NumPy official lifecycle source
Current roadmap | NEP 0 — Purpose and process | NEP 23 — Backwards compatibility and deprecation policy | NEP 36 — Fair play | NEP 45 — C style guide
Publisher identity used by product-specific official-source collectors.
Open official vendor source