Gnu Scientific Library vulnerabilities

2 known vulnerabilities affecting gnu/gnu_scientific_library.

Total CVEs

2

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

MEDIUM1LOW1

Vulnerabilities

Page 1 of 1

CVE-2024-50610LOWCVSS 3.6≤ 2.82024-10-27

CVE-2024-50610 [LOW] CWE-190 CVE-2024-50610: GSL (GNU Scientific Library) through 2.8 has an integer signedness error in gsl_siman_solve_many in GSL (GNU Scientific Library) through 2.8 has an integer signedness error in gsl_siman_solve_many in siman/siman.c. When params.n_tries is negative, incorrect memory allocation occurs.

CVE-2020-35357MEDIUMCVSS 6.5v2.5v2.62023-08-22

CVE-2020-35357 [MEDIUM] CWE-120 CVE-2020-35357: A buffer overflow can occur when calculating the quantile value using the Statistics Library of GSL A buffer overflow can occur when calculating the quantile value using the Statistics Library of GSL (GNU Scientific Library), versions 2.5 and 2.6. Processing a maliciously crafted input data for gsl_stats_quantile_from_sorted_data of the library may lead to unexpected application termination or arbitrary code execution.