CVE-2021-41500: Cvxopt Project Cvxopt

High severity, CVSS 7.5. EPSS: 1.2% chance of exploitation in the next 30 days.

Incomplete string comparison vulnerability exits in cvxopt.org cvxop <= 1.2.6 in APIs (cvxopt.cholmod.diag, cvxopt.cholmod.getfactor, cvxopt.cholmod.solve, cvxopt.cholmod.spsolve), which allows attackers to conduct Denial of Service attacks by construct fake Capsule objects.

Affected products

• Cvxopt Project Cvxopt: up to and including 1.2.6
• Fedoraproject Fedora: version 34 only

Published 2021-12-17. Last modified 2026-06-17.