446 matches found
PT-2024-12760 · Unknown · Paddlepaddle
Name of the Vulnerable Software and Affected Versions: PaddlePaddle versions prior to 2.6.0 Description: The issue is related to out-of-bounds OOB access in paddle.mode within PaddlePaddle. This flaw can cause a runtime crash and a denial of service. Recommendations: For versions prior to 2.6.0,...
PT-2024-14518 · Unknown · Paddlepaddle
Name of the Vulnerable Software and Affected Versions: PaddlePaddle versions prior to 2.6.0 Description: The issue is a command injection in the wget download function, allowing the execution of arbitrary commands on the operating system. Recommendations: For versions prior to 2.6.0, update to...
Command Injection
paddlepaddle is vulnerable to command injection. The vulnerability exists due to a lack of user input validation in the system parameter of fs.py which allows an attacker to inject arbitrary commands into the operating system...
Denial Of Service (DoS)
paddlepaddle is vulnerable to Denial Of Service DoS. The vulnerability exists due to the heap buffer overflow in the TraceInferMeta function of unary.cc, which allows an attacker to gain sensitive information and crash the application...
Denial Of Service (DoS)
paddlepaddle is vulnerable to Denial Of Service DoS. The vulnerability exists due to the null pointer dereference in the PyObjectCheckLongOrToLong function of opfunctioncommon.cc, which allows an attacker to cause an application crash...
Use After Free
paddlepaddle is vulnerable to Use After Free. The vulnerability exists due to the lack of range checks in the axis1 parameter in the DiagonalInferMeta function of unary.cc, allowing an attacker to cause an application crash...
GHSA-8WFH-QXXV-3Q8C Use after free in PaddlePaddle
Use after free in paddle.diagonal in PaddlePaddle before 2.5.0. This resulted in a potentially exploitable condition...
Use after free in PaddlePaddle
Use after free in paddle.diagonal in PaddlePaddle before 2.5.0. This resulted in a potentially exploitable condition...
GHSA-CV2J-922J-HR56 Float point exception (FPE) in paddlepaddle
FPE in paddle.linalg.matrixpower in PaddlePaddle before 2.5.0. This flaw can cause a runtime crash and a denial of service...
GHSA-9Q9V-QGWX-84MR Command injection in PaddlePaddle
PaddlePaddle before 2.5.0 has a command injection in fs.py. This resulted in the ability to execute arbitrary commands on the operating system...
GHSA-RR46-M366-GM44 Null pointer dereference in PaddlePaddle
Null pointer dereference in paddle.flip in PaddlePaddle before 2.5.0. This resulted in a runtime crash and denial of service...
Command injection in PaddlePaddle
PaddlePaddle before 2.5.0 has a command injection in fs.py. This resulted in the ability to execute arbitrary commands on the operating system...
Float point exception (FPE) in paddlepaddle
FPE in paddle.linalg.matrixpower in PaddlePaddle before 2.5.0. This flaw can cause a runtime crash and a denial of service...
Heap buffer overflow in PaddlePaddle
Heap buffer overflow in paddle.trace in PaddlePaddle before 2.5.0. This flaw can lead to a denial of service, information disclosure, or more damage is possible...
GHSA-HH7P-HVM3-RG88 Heap buffer overflow in PaddlePaddle
Heap buffer overflow in paddle.trace in PaddlePaddle before 2.5.0. This flaw can lead to a denial of service, information disclosure, or more damage is possible...
Null pointer dereference in PaddlePaddle
Null pointer dereference in paddle.flip in PaddlePaddle before 2.5.0. This resulted in a runtime crash and denial of service...
CVE-2023-38673
PaddlePaddle before 2.5.0 has a command injection in fs.py. This resulted in the ability to execute arbitrary commands on the operating system...
CVE-2023-38672
FPE in paddle.trace in PaddlePaddle before 2.5.0. This flaw can cause a runtime crash and a denial of service...
