Description
An out-of-bounds read flaw was found in the CLARRV, DLARRV, SLARRV, and ZLARRV functions in lapack through version 3.10.0, as also used in OpenBLAS before version 0.3.18. Specially crafted inputs passed to these functions could cause an application using lapack to crash or possibly disclose portions of its memory.
Metrics
CVSS 3.1 9.1/10
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:HWeakness enumeration
Affected software
| Vendor | Product | Versions |
|---|---|---|
| n/a | lapack | lapack through version 3.10.0 |
References
- https://github.com/JuliaLang/julia/issues/42415Issue Tracking, Patch, Third Party Advisory
- https://github.com/Reference-LAPACK/lapack/commit/38f3eeee3108b18158409ca2a100e6fe03754781Patch, Third Party Advisory
- https://github.com/Reference-LAPACK/lapack/pull/625Issue Tracking, Patch, Third Party Advisory
- https://github.com/xianyi/OpenBLAS/commit/2be5ee3cca97a597f2ee2118808a2d5eacea050cPatch, Third Party Advisory
- https://github.com/xianyi/OpenBLAS/commit/337b65133df174796794871b3988cd03426e6d41Patch, Third Party Advisory
- https://github.com/xianyi/OpenBLAS/commit/ddb0ff5353637bb5f5ad060c9620e334c143e3d7Patch, Third Party Advisory
- https://github.com/xianyi/OpenBLAS/commit/fe497efa0510466fd93578aaf9da1ad8ed4edbe7Patch, Third Party Advisory
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6QFEVOCUG2UXMVMFMTU4ONJVDEHY2LW2/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DROZM4M2QRKSD6FBO4BHSV2QMIRJQPHT/
- https://github.com/JuliaLang/julia/issues/42415Issue Tracking, Patch, Third Party Advisory
- https://github.com/Reference-LAPACK/lapack/commit/38f3eeee3108b18158409ca2a100e6fe03754781Patch, Third Party Advisory
- https://github.com/Reference-LAPACK/lapack/pull/625Issue Tracking, Patch, Third Party Advisory
- https://github.com/xianyi/OpenBLAS/commit/2be5ee3cca97a597f2ee2118808a2d5eacea050cPatch, Third Party Advisory
- https://github.com/xianyi/OpenBLAS/commit/337b65133df174796794871b3988cd03426e6d41Patch, Third Party Advisory
- https://github.com/xianyi/OpenBLAS/commit/ddb0ff5353637bb5f5ad060c9620e334c143e3d7Patch, Third Party Advisory
- https://github.com/xianyi/OpenBLAS/commit/fe497efa0510466fd93578aaf9da1ad8ed4edbe7Patch, Third Party Advisory
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6QFEVOCUG2UXMVMFMTU4ONJVDEHY2LW2/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DROZM4M2QRKSD6FBO4BHSV2QMIRJQPHT/
Timeline
- Published
- Dec 8, 2021
- Last modified
- Jun 17, 2026
- NVD status
- Modified