Intel

AIKIDO-2025-10405

cvxpy.cvxpy is vulnerable to Integer Overflow

Integer Overflow Pre-CVE
Found by Aikido Intel before public disclosure or CVE publication.
Published Jun 24, 2025

25

Low Risk

This Affects:

c++cvxpy.cvxpy
1.3.4 - 1.5.1
Fixed in 1.5.2
Are you affected? Scan for Free

TL;DR

NumPy’s default integer type on Windows is int32, which can cause integer overflows in operations like np.prod((60000, 60000)), returning incorrect negative values. In flatten_tensor, Python integers are generally cast to int64, but one instance applies this conversion too late, after the overflow has already occurred. Explicitly setting dtype=np.int64 in np.prod prevents this issue by ensuring calculations use 64-bit integers.

Who does this affect?

You are affected if you are using a version that falls within the vulnerable range and you are using Windows.

Background info

cvxpy.cvxpy is vulnerable to Integer Overflow in versions 1.3.4 - 1.5.1.

How to fix this

Upgrade the cvxpy.cvxpy library to the patch version.