Design/Logic Flaw

Out-of-bounds read in gathertree in PaddlePaddle before 2.4...

CVE-2022-46741

Out-of-bounds read in gathertree in PaddlePaddle before 2.4...

CVE-2022-46741

The CVE-2022-46741 entry applies to PaddlePaddle, with a root-cause in the gather_tree function causing an out-of-bounds read. Affected: PaddlePaddle versions prior to 2.4. The issue is described across multiple sources (including Red Hat, GHSA, OSV/NVD) as an out-of-bounds read in gather_tree be...

CVE-2022-46741

Out-of-bounds read in gathertree in PaddlePaddle before 2.4...

PT-2022-27976 · Unknown · Paddlepaddle

Name of the Vulnerable Software and Affected Versions: PaddlePaddle version 2.4.0-rc0 Description: The issue allows for code injection in the paddle.audio.functional.get window function, enabling arbitrary code execution. Recommendations: For PaddlePaddle version 2.4.0-rc0, consider applying the...

PaddlePaddle 缓冲区错误漏洞

PaddlePaddle PaddlePaddle is an independent R&D deep learning platform open-sourced by China's PaddlePaddle PaddlePaddle. PaddlePaddle 2.4 before the version of a security vulnerability , the vulnerability stems from gathertree read out of bounds...

PaddlePaddle 代码注入漏洞

PaddlePaddle is an independent R&D deep learning platform open-sourced by China's PaddlePaddle. PaddlePaddle versions prior to 2.4 have a security vulnerability that stems from. , code injection exists in paddle.audio.functional.getwindow, allowing arbitrary code execution...

PT-2022-27975

Name of the Vulnerable Software and Affected Versions PaddlePaddle versions prior to 2.4 Description The issue is an out-of-bounds read in the gather tree function. This problem affects PaddlePaddle versions before 2.4. A patch for this issue is available in the release/2.4 branch. Recommendation...

Arbitrary Code Execution

paddlepaddle is vulnerable to arbitrary code execution. The vulnerability exists in the multiple functions of window.py, allowing an attacker to inject and execute malicious code through the winstr parameter...

PaddlePaddle vulnerable to code injection via winstr

In PaddlePaddle before 2.4, paddle.audio.functional.getwindow is vulnerable to code injection because it calls eval on a user-supplied winstr. This may lead to arbitrary code execution...

GHSA-83G7-8FCH-P37M PaddlePaddle vulnerable to code injection via winstr

In PaddlePaddle before 2.4, paddle.audio.functional.getwindow is vulnerable to code injection because it calls eval on a user-supplied winstr. This may lead to arbitrary code execution...

CVE-2022-45908

In PaddlePaddle before 2.4, paddle.audio.functional.getwindow is vulnerable to code injection because it calls eval on a user-supplied winstr. This may lead to arbitrary code execution...

Code injection

In PaddlePaddle before 2.4, paddle.audio.functional.getwindow is vulnerable to code injection because it calls eval on a user-supplied winstr. This may lead to arbitrary code execution...

CVE-2022-45908

In PaddlePaddle before 2.4, paddle.audio.functional.getwindow is vulnerable to code injection because it calls eval on a user-supplied winstr. This may lead to arbitrary code execution...

CVE-2022-45908

In PaddlePaddle before 2.4, paddle.audio.functional.getwindow is vulnerable to code injection because it calls eval on a user-supplied winstr. This may lead to arbitrary code execution...

PT-2022-27677

Name of the Vulnerable Software and Affected Versions PaddlePaddle versions prior to 2.4 Description The issue arises from the paddle.audio.functional.get window function calling eval on a user-supplied winstr, leading to potential code injection and arbitrary code execution. Recommendations For...

CVE-2022-45908

In PaddlePaddle before 2.4, paddle.audio.functional.getwindow is vulnerable to code injection because it calls eval on a user-supplied winstr. This may lead to arbitrary code execution...

PaddlePaddle 代码注入漏洞

PaddlePaddle Flying Paddle is an independent R&D deep learning platform open-sourced by China's Flying Paddle PaddlePaddle. PaddlePaddle 2.4 has a security vulnerability , the vulnerability stems from its paddle.audio.functional.getwindow component in the user-supplied winstr call eval allows an...

CVE-2022-45908

PaddlePaddle before 2.4 is affected by a code injection vulnerability in paddle.audio.functional.get_window, which calls eval on a user-supplied winstr. The underlying cause is evaluating untrusted input, potentially leading to arbitrary code execution. The issue is documented across multiple sou...

Anakin path traversal vulnerability

Anakin is a cross-platform, high-performance inference engine open-sourced by PaddlePaddle.Anakin 0.1.1 and earlier versions have a path traversal vulnerability that stems from a failure of Flask's sendfile function to properly filter special elements in resource or file paths, which could be...