CVE-2022-46742

Code injection in paddle.audio.functional.getwindow in PaddlePaddle 2.4.0-rc0 allows arbitrary code execution...

CVE-2022-46742

Code injection in paddle.audio.functional.getwindow in PaddlePaddle 2.4.0-rc0 allows arbitrary code execution...

PYSEC-2022-43063

Code injection in paddle.audio.functional.getwindow in PaddlePaddle 2.4.0-rc0 allows arbitrary code execution...

paddle-ner (=0.1.0), paddle-quantum (>=1.1.1 <=2.2.1) +3 more potentially affected by CVE-2022-46742 via paddlepaddle (=1.8.5)

paddlepaddle PYPI version =1.8.5 is affected by a known vulnerability. The following packages have a transitive dependency on paddlepaddle and may be impacted: - paddle-ner =0.1.0 - paddle-quantum =1.1.1, =1.8.5.0, =1.8.5.1 - paddle-tokenizer =0.1.0 - pyunit-ner =2021.8.2 Source cves:...

Code injection

Code injection in paddle.audio.functional.getwindow in PaddlePaddle 2.4.0-rc0 allows arbitrary code execution...

PYSEC-2022-43063

Code injection in paddle.audio.functional.getwindow in PaddlePaddle 2.4.0-rc0 allows arbitrary code execution...

CVE-2022-46742

CVE-2022-46742 affects PaddlePaddle prior to the 2.4.0 release candidate. The vulnerability resides in paddle.audio.functional.get_window, where code injection can lead to arbitrary code execution. Impact is described as high (critical in CVSS terms) with a network attack vector and no user inter...

CVE-2022-46742

Code injection in paddle.audio.functional.getwindow in PaddlePaddle 2.4.0-rc0 allows arbitrary code execution...

CVE-2022-46742

Code injection in paddle.audio.functional.getwindow in PaddlePaddle 2.4.0-rc0 allows arbitrary code execution...

CVE-2022-46741

Out-of-bounds read in gathertree in PaddlePaddle before 2.4...

CVE-2022-46741

Out-of-bounds read in gathertree in PaddlePaddle before 2.4...

Design/Logic Flaw

Out-of-bounds read in gathertree in PaddlePaddle before 2.4...

CVE-2022-46741

The CVE-2022-46741 entry applies to PaddlePaddle, with a root-cause in the gather_tree function causing an out-of-bounds read. Affected: PaddlePaddle versions prior to 2.4. The issue is described across multiple sources (including Red Hat, GHSA, OSV/NVD) as an out-of-bounds read in gather_tree be...

CVE-2022-46741

Out-of-bounds read in gathertree in PaddlePaddle before 2.4...

CVE-2022-46741

Out-of-bounds read in gathertree in PaddlePaddle before 2.4...

PT-2022-27976 · Unknown · Paddlepaddle

Name of the Vulnerable Software and Affected Versions: PaddlePaddle version 2.4.0-rc0 Description: The issue allows for code injection in the paddle.audio.functional.get window function, enabling arbitrary code execution. Recommendations: For PaddlePaddle version 2.4.0-rc0, consider applying the...

PaddlePaddle 缓冲区错误漏洞

PaddlePaddle PaddlePaddle is an independent R&D deep learning platform open-sourced by China's PaddlePaddle PaddlePaddle. PaddlePaddle 2.4 before the version of a security vulnerability , the vulnerability stems from gathertree read out of bounds...

PT-2022-27975

Name of the Vulnerable Software and Affected Versions PaddlePaddle versions prior to 2.4 Description The issue is an out-of-bounds read in the gather tree function. This problem affects PaddlePaddle versions before 2.4. A patch for this issue is available in the release/2.4 branch. Recommendation...

PaddlePaddle 代码注入漏洞

PaddlePaddle is an independent R&D deep learning platform open-sourced by China's PaddlePaddle. PaddlePaddle versions prior to 2.4 have a security vulnerability that stems from. , code injection exists in paddle.audio.functional.getwindow, allowing arbitrary code execution...

Arbitrary Code Execution

paddlepaddle is vulnerable to arbitrary code execution. The vulnerability exists in the multiple functions of window.py, allowing an attacker to inject and execute malicious code through the winstr parameter...