PYSEC-2022-43063

Code injection in paddle.audio.functional.getwindow in PaddlePaddle 2.4.0-rc0 allows arbitrary code execution...

PT-2022-27976 · Unknown · Paddlepaddle

Name of the Vulnerable Software and Affected Versions: PaddlePaddle version 2.4.0-rc0 Description: The issue allows for code injection in the paddle.audio.functional.get window function, enabling arbitrary code execution. Recommendations: For PaddlePaddle version 2.4.0-rc0, consider applying the...

PT-2022-27677 · Unknown · Paddlepaddle

Name of the Vulnerable Software and Affected Versions: PaddlePaddle versions prior to 2.4 Description: The issue arises from the paddle.audio.functional.get window function calling eval on a user-supplied winstr, leading to potential code injection and arbitrary code execution. Recommendations: F...