Mend.io Vulnerability Database

What is a CVE vulnerability ID? icon What is a WS vulnerability ID? icon What is an MSC vulnerability ID? icon
New vulnerability? Tell us about it!
icon

We found results for “”

CVE-2013-1424

Date: June 26, 2025

Matplotlib before 1.4.3 is vulnerable to buffer overrun in mplutils Printf().Printf constructor accepts an arbitrary format string and values, and dumps it into a 1024-byte buffer with vsprintf. This is obviously not safe, as the user can simply supply enough bytes to overflow the 1024-byte buffer.

Language: C++

Severity Score

Related Resources (6)

https://people.canonical.com/~ubuntu-security/cve/CVE-2013-1424
https://bugs.debian.org/775691
https://security-tracker.debian.org/tracker/CVE-2013-1424
https://nvd.nist.gov/vuln/detail/CVE-2013-1424
https://github.com/matplotlib/matplotlib/commit/ba4016014cb4fb4927e36ce8ea429fed47dcb787
https://www.mend.io/vulnerability-database/CVE-2013-1424

Severity Score

Weakness Type (CWE)

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CWE-120

CVSS v3.1

Base Score:
Attack Vector (AV): NETWORK
Attack Complexity (AC): HIGH
Privileges Required (PR): NONE
User Interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality (C): LOW
Integrity (I): LOW
Availability (A): LOW

Do you need more information?

Contact Us