LAPACK is a foundational linear-algebra library embedded across scientific computing, engineering simulation, and data-analysis software stacks, where its vulnerability footprint remains concentrated in the core library itself. The observed weakness pattern centers on out-of-bounds read conditions, reflecting the memory-access complexity inherent to matrix and vector operations on user-supplied dimensions. Current severity, exploitation activity, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Lapack Project over time
Signals from CVEs in this vendor scope (1 CVEs).
1 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2021-4048CRITICAL An out-of-bounds read flaw was found in the CLARRV, DLARRV, SLARRV, and ZLARRV functions in lapack through version 3.10.0, as also used in OpenBLAS before version 0.3.18. Specially | Dec 8, 2021 | 9.1 | 30 | NO | NO |
Signals from CVEs in this vendor scope (1 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Lapack Project.
Media articles that mention a CVE ID that affects a product developed by Lapack Project — matched by CVE ID, not by vendor name.