---
id: CVE-2019-6446
aliases:
  - GHSA-9fq2-x9r6-wfmf
  - PYSEC-2019-108
title: Numpy Deserialization of Untrusted Data
summary: Numpy Deserialization of Untrusted Data
severity: critical
cvss: 9.8
cvssVector: 'CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
vendor: numpy
product: numpy
ecosystem: pip
affected:
  - numpy < 1.16.3
patched:
  - numpy 1.16.3
published: '2022-05-24'
updated: '2026-07-06'
source: OSV
sourceUrl: 'https://osv.dev/vulnerability/GHSA-9fq2-x9r6-wfmf'
references:
  - url: 'https://nvd.nist.gov/vuln/detail/CVE-2019-6446'
  - url: 'https://github.com/numpy/numpy/issues/12759'
  - url: 'https://github.com/numpy/numpy/pull/12889'
  - url: 'https://github.com/numpy/numpy/pull/13359'
  - url: >-
      https://github.com/numpy/numpy/commit/89b688732b37616c9d26623f81aaee1703c30ffb
  - url: 'https://access.redhat.com/errata/RHSA-2019:3335'
  - url: 'https://access.redhat.com/errata/RHSA-2019:3704'
  - url: 'https://bugzilla.suse.com/show_bug.cgi?id=1122208'
  - url: 'https://github.com/advisories/GHSA-9fq2-x9r6-wfmf'
  - url: 'https://github.com/numpy/numpy'
  - url: >-
      https://github.com/pypa/advisory-database/tree/main/vulns/numpy/PYSEC-2019-108.yaml
  - url: >-
      https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7ZZAYIQNUUYXGMKHSPEEXS4TRYFOUYE4
  - url: >-
      https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7ZZAYIQNUUYXGMKHSPEEXS4TRYFOUYE4
  - url: >-
      https://web.archive.org/web/20210124234613/https://www.securityfocus.com/bid/106670
  - url: 'http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00091.html'
  - url: 'http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00092.html'
  - url: 'http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00015.html'
  - url: 'http://www.securityfocus.com/bid/106670'
tags:
  - osv
  - pip
  - exploit-available
epss: 0.13625
epssPercentile: 0.96362
ingestedAt: '2026-07-08T18:25:47.848Z'
exploits:
  github: 1
  githubRepos:
    - 'https://github.com/RayScri/CVE-2019-6446'
  checkedAt: '2026-09-21T15:24:39.764Z'
exploitAvailable: true
---

## Overview

** DISPUTED **  An issue was discovered in NumPy 1.16.2 and earlier. It uses the pickle Python module unsafely, which allows remote attackers to execute arbitrary code via a crafted serialized object, as demonstrated by a numpy.load call. NOTE: third parties dispute this issue because it is  a behavior that might have legitimate applications in (for example) loading serialized Python object arrays from trusted and authenticated sources.

## Affected packages

- `numpy < 1.16.3`

## Remediation

Upgrade to a patched release:

- `numpy 1.16.3`