GitHub Advisoryadvisory · PyPI

GHSA-xwc8-rf6m-xr86 hnswlib Double Free vulnerability

MEDIUM Published 2023-06-30 Modified 2026-03-25 Official page ↗
Aliases
CVE-2023-37365
Ecosystem
PyPI
Packages
hnswlib
Severity
Moderate
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Weaknesses
CWE-415
Reviewed
2023-06-30

Affected packages

• PyPI hnswlib: < 0.8.0 → fixed in 0.8.0

Description

Hnswlib 0.7.0 has a double free in `init_index` when the M argument is a large integer.

Related

Alias · CVE (1)

  • CVE-2023-37365 Hnswlib 0.7.0 has a double free in init_index when the M argument is a large integer. vulnerability

Weakness · CWE (1)

References