446 matches found
PaddlePaddle 操作系统命令注入漏洞
PaddlePaddle is an independent R&D deep learning platform open-sourced by China's PaddlePaddle. A security vulnerability exists in PaddlePaddle versions prior to 2.5.0, which stems from a command injection vulnerability in PaddlePaddle's fs.py file...
PaddlePaddle 数字错误漏洞
PaddlePaddle PaddlePaddle is an independent R&D deep learning platform open-sourced by China's PaddlePaddle PaddlePaddle. A security vulnerability exists in PaddlePaddle versions prior to 2.5.0, which stems from a Floating Point Exception FPE vulnerability in PaddlePaddle's paddle.trace function,...
PT-2023-26544
Name of the Vulnerable Software and Affected Versions PaddlePaddle versions prior to 2.5.0 Description The issue is related to a heap buffer overflow in paddle.trace, which can lead to a denial of service, information disclosure, or potentially more severe damage. Recommendations For versions pri...
PT-2023-26546 · Unknown · Paddlepaddle
Name of the Vulnerable Software and Affected Versions: PaddlePaddle versions prior to 2.5.0 Description: The issue allows for command injection in the fs.py module, resulting in the ability to execute arbitrary commands on the operating system. Recommendations: For versions prior to 2.5.0, update...
Arbitrary Code Execution
paddlepaddle is vulnerable to arbitrary code execution. The vulnerability exists in the getwindow function in window.py because it calls eval on user supplied winstr which allows an attacker to inject and execute malicious codes in to the system...
Out-of-bounds Write
paddlepaddle is vulnerable to out of bounds write. The vulnerability exists due to the mach0.c because it allows an attacker to trigger a read from outside the allocated bounds of the heap...
PaddlePaddle Out-of-bounds Read vulnerability
Out-of-bounds read in gathertree in PaddlePaddle before 2.4. A patch is available in the release/2.4 branch...
PaddlePaddle vulnerable to Code Injection
Code injection in paddle.audio.functional.getwindow in PaddlePaddle 2.4.0-rc0 allows arbitrary code execution. A patch is available on the develop branch of the repository and anticipated to be part of a 2.4 release...
GHSA-GCJF-29M9-888Q PaddlePaddle vulnerable to Code Injection
Code injection in paddle.audio.functional.getwindow in PaddlePaddle 2.4.0-rc0 allows arbitrary code execution. A patch is available on the develop branch of the repository and anticipated to be part of a 2.4 release...
GHSA-2HVC-HWG3-HPVW PaddlePaddle Out-of-bounds Read vulnerability
Out-of-bounds read in gathertree in PaddlePaddle before 2.4. A patch is available in the release/2.4 branch...
CVE-2022-46742
Code injection in paddle.audio.functional.getwindow in PaddlePaddle 2.4.0-rc0 allows arbitrary code execution...
CVE-2022-46742
Code injection in paddle.audio.functional.getwindow in PaddlePaddle 2.4.0-rc0 allows arbitrary code execution...
PYSEC-2022-43063
Code injection in paddle.audio.functional.getwindow in PaddlePaddle 2.4.0-rc0 allows arbitrary code execution...
PYSEC-2022-43063
Code injection in paddle.audio.functional.getwindow in PaddlePaddle 2.4.0-rc0 allows arbitrary code execution...
Code injection
Code injection in paddle.audio.functional.getwindow in PaddlePaddle 2.4.0-rc0 allows arbitrary code execution...
CVE-2022-46742
CVE-2022-46742 affects PaddlePaddle prior to the 2.4.0 release candidate. The vulnerability resides in paddle.audio.functional.get_window, where code injection can lead to arbitrary code execution. Impact is described as high (critical in CVSS terms) with a network attack vector and no user inter...
CVE-2022-46742
Code injection in paddle.audio.functional.getwindow in PaddlePaddle 2.4.0-rc0 allows arbitrary code execution...
CVE-2022-46742
Code injection in paddle.audio.functional.getwindow in PaddlePaddle 2.4.0-rc0 allows arbitrary code execution...