498 matches found
CVE-2023-38669
Use after free in paddle.diagonal in PaddlePaddle before 2.5.0. This resulted in a potentially exploitable condition...
CVE-2023-38669
Use after free in paddle.diagonal in PaddlePaddle before 2.5.0. This resulted in a potentially exploitable condition...
PaddlePaddle 操作系统命令注入漏洞
PaddlePaddle is an independent R&D deep learning platform open-sourced by China's PaddlePaddle. A security vulnerability exists in PaddlePaddle versions prior to 2.5.0, which stems from a command injection vulnerability in PaddlePaddle's fs.py file...
PaddlePaddle 缓冲区错误漏洞
PaddlePaddle is an independent R&D deep learning platform open-sourced by China's PaddlePaddle. PaddlePaddle 2.5.0 before the version of a security vulnerability , the vulnerability stems from the PaddlePaddle paddle.trace function in the existence of a heap-based buffer overflow Heap buffer...
PaddlePaddle 代码问题漏洞
PaddlePaddle is an independent R&D deep learning platform open-sourced by China's PaddlePaddle. PaddlePaddle version 2.5.0 before there is a security vulnerability , the vulnerability stems from the PaddlePaddle paddle.flip function in the existence of a null pointer dereference Null pointer...
PT-2023-26543 · Unknown · Paddlepaddle
Name of the Vulnerable Software and Affected Versions: PaddlePaddle versions prior to 2.5.0 Description: The issue is a null pointer dereference in the paddle.flip function, which results in a runtime crash and denial of service. Recommendations: For versions prior to 2.5.0, update to version 2.5...
PaddlePaddle 数字错误漏洞
PaddlePaddle PaddlePaddle is an independent R&D deep learning platform open-sourced by China's PaddlePaddle PaddlePaddle. A security vulnerability exists in PaddlePaddle versions prior to 2.5.0, which stems from a Floating Point Exception FPE vulnerability in PaddlePaddle's paddle.trace function,...
PT-2023-26542 · Unknown · Paddlepaddle
Name of the Vulnerable Software and Affected Versions: PaddlePaddle versions prior to 2.5.0 Description: The issue is related to a use after free condition in the paddle.diagonal function. This resulted in a potentially exploitable condition. Recommendations: For versions prior to 2.5.0, update t...
PT-2023-26546 · Unknown · Paddlepaddle
Name of the Vulnerable Software and Affected Versions: PaddlePaddle versions prior to 2.5.0 Description: The issue allows for command injection in the fs.py module, resulting in the ability to execute arbitrary commands on the operating system. Recommendations: For versions prior to 2.5.0, update...
PT-2023-26545 · Unknown · Paddlepaddle
Name of the Vulnerable Software and Affected Versions: PaddlePaddle versions prior to 2.5.0 Description: The issue is related to a flaw that can cause a runtime crash and a denial of service. It is associated with FPE in paddle.trace and paddle.linalg.matrix power in PaddlePaddle. Recommendations...
PaddlePaddle 资源管理错误漏洞
PaddlePaddle is an independent R&D deep learning platform open-sourced by China's PaddlePaddle. A security vulnerability exists in PaddlePaddle versions prior to 2.5.0, which stems from a Use after free vulnerability. An attacker could use this vulnerability to perform unauthorized operations or...
PT-2023-26544
Name of the Vulnerable Software and Affected Versions PaddlePaddle versions prior to 2.5.0 Description The issue is related to a heap buffer overflow in paddle.trace, which can lead to a denial of service, information disclosure, or potentially more severe damage. Recommendations For versions pri...
Arbitrary Code Execution
paddlepaddle is vulnerable to arbitrary code execution. The vulnerability exists in the getwindow function in window.py because it calls eval on user supplied winstr which allows an attacker to inject and execute malicious codes in to the system...
Out-of-bounds Write
paddlepaddle is vulnerable to out of bounds write. The vulnerability exists due to the mach0.c because it allows an attacker to trigger a read from outside the allocated bounds of the heap...
PaddlePaddle vulnerable to Code Injection
Code injection in paddle.audio.functional.getwindow in PaddlePaddle 2.4.0-rc0 allows arbitrary code execution. A patch is available on the develop branch of the repository and anticipated to be part of a 2.4 release...
PaddlePaddle Out-of-bounds Read vulnerability
Out-of-bounds read in gathertree in PaddlePaddle before 2.4. A patch is available in the release/2.4 branch...
paddle-ner (=0.1.0), paddle-quantum (>=1.1.1 <=2.2.1) +3 more potentially affected by CVE-2022-46742 via paddlepaddle (=1.8.5)
paddlepaddle PYPI version =1.8.5 is affected by a known vulnerability. The following packages have a transitive dependency on paddlepaddle and may be impacted: - paddle-ner =0.1.0 - paddle-quantum =1.1.1, =1.8.5.0, =1.8.5.1 - paddle-tokenizer =0.1.0 - pyunit-ner =2021.8.2 Source cves:...
GHSA-GCJF-29M9-888Q PaddlePaddle vulnerable to Code Injection
Code injection in paddle.audio.functional.getwindow in PaddlePaddle 2.4.0-rc0 allows arbitrary code execution. A patch is available on the develop branch of the repository and anticipated to be part of a 2.4 release...
paddle-ner (=0.1.0), paddle-quantum (>=1.1.1 <=2.2.1) +3 more potentially affected by CVE-2022-46741 via paddlepaddle (=1.8.5)
paddlepaddle PYPI version =1.8.5 is affected by a known vulnerability. The following packages have a transitive dependency on paddlepaddle and may be impacted: - paddle-ner =0.1.0 - paddle-quantum =1.1.1, =1.8.5.0, =1.8.5.1 - paddle-tokenizer =0.1.0 - pyunit-ner =2021.8.2 Source cves:...