CVE-2023-52303

PaddlePaddle vulnerability CVE-2023-52303 affects PaddlePaddle before 2.6.0, via a NULL pointer dereference in paddle.put_along_axis that can crash a runtime and cause a Denial of Service. Affected component: PaddlePaddle’s tensor axis operation implementation; root cause: NULL pointer handling i...

CVE-2023-52303 Segfault in paddle.put_along_axis

Nullptr in paddle.putalongaxis in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash and a denial of service...

CVE-2023-52302

CVE-2023-52302 concerns a NULL pointer dereference in the paddle.nextafter implementation inside PaddlePaddle. Multiple connected sources describe that this flaw can cause a runtime crash, leading to a Denial of Service. The affected component is PaddlePaddle’s paddle.nextafter function; the impa...

CVE-2023-52302 Segfault in paddle.nextafter

Nullptr in paddle.nextafter in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash and a denial of service...

CVE-2023-38676 Segfault in paddle.dot

Nullptr in paddle.dot in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash and a denial of service...

CVE-2023-38676 Segfault in paddle.dot

Nullptr in paddle.dot in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash and a denial of service...

CVE-2023-38676

CVE-2023-38676 affects PaddlePaddle: the nullptr in paddle.dot can trigger a runtime crash leading to Denial of Service. The flaw targets PaddlePaddle prior to version 2.6.0 and is described as a segfault/NULL pointer dereference in paddle.dot. The available connected documents reiterate the same...

CVE-2023-0359

A missing nullptr-check in handlerainput can cause a nullptr-deref...

Design/Logic Flaw

A missing nullptr-check in handlerainput can cause a nullptr-deref...

CVE-2023-0359 ipv6: Missing ipv6 nullptr-check in handle_ra_input

A missing nullptr-check in handlerainput can cause a nullptr-deref...

CVE-2023-0359 ipv6: Missing ipv6 nullptr-check in handle_ra_input

A missing nullptr-check in handlerainput can cause a nullptr-deref...

CVE-2023-0359

CVE-2023-0359 concerns Zephyr RTOS: a missing nullptr-check in the handle_ra_input function can lead to a NULL dereference. The public description states this is the core issue; CVSS metrics from NVD indicate a base score of 7.5 (HIGH) with network attack vector and no user interaction, and the i...

CVE-2023-0359: Improper Input Validation

A missing nullptr-check in handlerainput can cause a nullptr-deref...

Stack overflow

TensorFlow is an open source machine learning platform. When running versions prior to 2.12.0 and 2.11.1 with XLA, tf.rawops.ParallelConcat segfaults with a nullptr dereference when given a parameter shape with rank that is not greater than zero. A fix is available in TensorFlow 2.12.0 and 2.11.1...

CVE-2023-25660

CVE-2023-25660 affects TensorFlow where the parameter summarize of tf.raw_ops.Print, when zero, makes SummarizeArray reference a nullptr, causing a segfault. Affected versions are prior to 2.12.0 and 2.11.1. The issue is triggered by an out-of-bounds-like condition in a debug/print path and is mi...

Amazon Linux 2023 : protobuf, protobuf-compiler, protobuf-devel (ALAS2023-2023-009)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2023-009 advisory. A flaw was found in protobuf. The vulnerability occurs due to incorrect parsing of a NULL character in the proto symbol and leads to a Null pointer dereference. This flaw allows an attacker to execute...

Moderate: Red Hat Security Advisory: Red Hat OpenStack Platform 16.1.9 (protobuf) security update

An update for protobuf is now available for Red Hat OpenStack Platform 16.1.9 Train for Red Hat Enterprise Linux RHEL 8.2. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

Moderate: Red Hat Security Advisory: Red Hat OpenStack Platform 16.2.4 (protobuf) security update

An update for protobuf is now available for Red Hat OpenStack Platform 16.2.4 Train. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

Google TensorFlow code issue vulnerability (CNVD-2022-80679)

Google TensorFlow is an end-to-end open source platform for machine learning from Google, Inc. A code issue vulnerability exists in Google TensorFlow, which results from pywrap code failing to parse a tensor and returning an uncaught "nullptr" if a list of quantified tensors is assigned to an...

Oracle Linux 9 : protobuf (ELSA-2022-7970)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-7970 advisory. 3.14.0-13 - Rebuilt for test fixes 3.14.0-12 - Rebuilt for test fixes 3.14.0-11 - Applied patch for for CVE-2021-22570 2055641 Tenable has extracted the precedi...