Lucene search
GoogleOSV:GHSA-4Q2W-RW7M-XQW6HistoryMay 13, 2022 - 1:07 a.m.
Sony Neural Network Libraries reliance on untrusted inputs prior to v1.0.10
2022-05-1301:07:57
Google
osv.dev
8
sony
neural network
libraries
untrusted inputs
EPSS
0.002
Percentile
55.9%
nbla/logger.cpp in libnnabla.a in Sony Neural Network Libraries (aka nnabla) prior to v1.0.10 relies on the HOME environment variable, which might be untrusted.
References
github.com/advisories/GHSA-4q2w-rw7m-xqw6
github.com/pypa/advisory-database/tree/main/vulns/nnabla/PYSEC-2019-107.yaml
github.com/sony/nnabla
github.com/sony/nnabla/commit/e87347648ab7210529a0e60f0849680de8e9b63a
github.com/sony/nnabla/issues/209
github.com/sony/nnabla/pull/299
github.com/sony/nnabla/releases/tag/v1.0.10
nvd.nist.gov/vuln/detail/CVE-2019-10844
Related
osv
osv
CVE-2019-10844
2019-04-04 05:29:00
PYSEC-2019-107
2019-04-04 05:29:00
cvelist
cvelist
CVE-2019-10844
2019-04-04 04:19:49
nvd
nvd
CVE-2019-10844
2019-04-04 05:29:00
prion
prion
Code injection
2019-04-04 05:29:00
cve
cve
CVE-2019-10844
2019-04-04 05:29:00
github
github
Sony Neural Network Libraries reliance on untrusted inputs prior to v1.0.10
2022-05-13 01:07:57