CVE-2023-38672

The CVE-2023-38672 entry describes a float-point exception (FPE) in PaddlePaddle prior to version 2.5.0, specifically affecting paddle.trace (and related references indicate paddle.linalg.matrix_power) and causing a runtime crash that can lead to a denial of service. The connected documents confi...

CVE-2023-38671 Heap buffer overflow in paddle.trace

Heap buffer overflow in paddle.trace in PaddlePaddle before 2.5.0. This flaw can lead to a denial of service, information disclosure, or more damage is possible...

CVE-2023-38671

CVE-2023-38671 describes a heap buffer overflow in PaddlePaddle's paddle.trace, affecting PaddlePaddle prior to version 2.5.0. The underlying issue allows heap-based corruption that can lead to denial of service and information disclosure (as stated by multiple sources); there is no explicit expl...

CVE-2023-38670 Null pointer dereference in paddle.flip

Null pointer dereference in paddle.flip in PaddlePaddle before 2.5.0. This resulted in a runtime crash and denial of service...

CVE-2023-38670

CVE-2023-38670 concerns PaddlePaddle: a null pointer dereference in paddle.flip causes a runtime crash and denial of service. The issue affects PaddlePaddle before version 2.5.0 and is triggered by the paddle.flip implementation (root cause: null pointer dereference). Public documents describe th...

CVE-2023-38670 Null pointer dereference in paddle.flip

Null pointer dereference in paddle.flip in PaddlePaddle before 2.5.0. This resulted in a runtime crash and denial of service...

CVE-2023-38669

Use after free in paddle.diagonal in PaddlePaddle before 2.5.0. This resulted in a potentially exploitable condition...

CVE-2023-38669

Use after free in paddle.diagonal in PaddlePaddle before 2.5.0. This resulted in a potentially exploitable condition...

PYSEC-2023-122

Use after free in paddle.diagonal in PaddlePaddle before 2.5.0. This resulted in a potentially exploitable condition...

PYSEC-2023-122

Use after free in paddle.diagonal in PaddlePaddle before 2.5.0. This resulted in a potentially exploitable condition...

Design/Logic Flaw

Use after free in paddle.diagonal in PaddlePaddle before 2.5.0. This resulted in a potentially exploitable condition...

CVE-2023-38669

Use after free in paddle.diagonal in PaddlePaddle before 2.5.0. This resulted in a potentially exploitable condition...

CVE-2023-38669

CVE-2023-38669 affects PaddlePaddle before 2.5.0, with a use-after-free in paddle.diagonal. The vulnerability (reported as potentially exploitable) is described across multiple sources; primary impact is high, and CVSS v3.1 scores indicate CRITICAL/ HIGH where applicable. Public details provided:...

CVE-2023-38669

Use after free in paddle.diagonal in PaddlePaddle before 2.5.0. This resulted in a potentially exploitable condition...

PT-2023-26542 · Unknown · Paddlepaddle

Name of the Vulnerable Software and Affected Versions: PaddlePaddle versions prior to 2.5.0 Description: The issue is related to a use after free condition in the paddle.diagonal function. This resulted in a potentially exploitable condition. Recommendations: For versions prior to 2.5.0, update t...

PT-2023-26543 · Unknown · Paddlepaddle

Name of the Vulnerable Software and Affected Versions: PaddlePaddle versions prior to 2.5.0 Description: The issue is a null pointer dereference in the paddle.flip function, which results in a runtime crash and denial of service. Recommendations: For versions prior to 2.5.0, update to version 2.5...

PT-2023-26545 · Unknown · Paddlepaddle

Name of the Vulnerable Software and Affected Versions: PaddlePaddle versions prior to 2.5.0 Description: The issue is related to a flaw that can cause a runtime crash and a denial of service. It is associated with FPE in paddle.trace and paddle.linalg.matrix power in PaddlePaddle. Recommendations...

PaddlePaddle 缓冲区错误漏洞

PaddlePaddle is an independent R&D deep learning platform open-sourced by China's PaddlePaddle. PaddlePaddle 2.5.0 before the version of a security vulnerability , the vulnerability stems from the PaddlePaddle paddle.trace function in the existence of a heap-based buffer overflow Heap buffer...

PaddlePaddle 资源管理错误漏洞

PaddlePaddle is an independent R&D deep learning platform open-sourced by China's PaddlePaddle. A security vulnerability exists in PaddlePaddle versions prior to 2.5.0, which stems from a Use after free vulnerability. An attacker could use this vulnerability to perform unauthorized operations or...

PaddlePaddle 代码问题漏洞

PaddlePaddle is an independent R&D deep learning platform open-sourced by China's PaddlePaddle. PaddlePaddle version 2.5.0 before there is a security vulnerability , the vulnerability stems from the PaddlePaddle paddle.flip function in the existence of a null pointer dereference Null pointer...