Approved changes feed: RSS · Atom
cpe:2.3:a:openblas_project:openblas:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Openblas Project (1480e83b-ed62-5030-8a4f-e658645d8c06) |
|---|---|
| Product | Openblas (5d3bdf1e-28d7-5fcf-99c5-fefcd6ad9dcb) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/xianyi/openblas |
purl2cpe | 2026-06-01 10:12:18.117078 |
pkg:gitlab/molcas/openblas |
purl2cpe | 2026-06-01 10:12:18.117081 |
pkg:nuget/OpenBLAS |
purl2cpe | 2026-06-01 10:12:18.117084 |
pkg:rpm/fedora/openblas |
purl2cpe | 2026-06-01 10:12:18.117086 |
pkg:sourceforge/openblas |
purl2cpe | 2026-06-01 10:12:18.117089 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2021-4048 |
vulnerable | 2026-06-08 05:38:08.234758 |
Details available
An out-of-bounds read flaw was found in the CLARRV, DLARRV, SLARRV, and ZLARRV functions in lapack through version 3.10.0, as also used in OpenBLAS before version 0.3.18. Specially crafted inputs passed to these functions could cause an application using lapack to crash or possibly disclose portions of its memory.
Published: 2021-12-08T21:24:42.000Z
Updated: 2024-08-03T17:16:03.570Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.