PT-2025-14584 · Mindspore · Mindspore

Name of the Vulnerable Software and Affected Versions: MindSpore version 2.5.0 Description: A vulnerability has been found in MindSpore, affecting the function mindspore.numpy.fft.rfft2. This issue leads to memory corruption and requires a local approach to exploit. The exploit has been disclosed...

Huawei Technologies Ltd MindSpore suffers from a logic flaw vulnerability (CNVD-2024-24257)

MindSpore is a new open source deep learning training/inference framework for mobile, edge and cloud scenarios. Huawei Technologies Ltd MindSpore suffers from a logic flaw vulnerability that can be exploited by attackers to cause a denial of service...

Denial Of Service (DoS)

mindspore is vulnerable to Denial of Service DoS attacks. A malicious user is able to cause an application crash due to a memory corruption due to the function JsonHelper::UpdateArray in the file jsonhelper.cc...

GHSA-X67G-47P3-RC7F MindSpore vulnerable to memory corruption

A vulnerability classified as problematic was found in MindSpore 2.0.0-alpha/2.0.0-rc1. This vulnerability affects the function JsonHelper::UpdateArray of the file mindspore/ccsrc/minddata/dataset/util/jsonhelper.cc. The manipulation leads to memory corruption. The name of the patch is...

MindSpore vulnerable to memory corruption

A vulnerability classified as problematic was found in MindSpore 2.0.0-alpha/2.0.0-rc1. This vulnerability affects the function JsonHelper::UpdateArray of the file mindspore/ccsrc/minddata/dataset/util/jsonhelper.cc. The manipulation leads to memory corruption. The name of the patch is...

CVE-2023-2970

A vulnerability classified as problematic was found in MindSpore 2.0.0-alpha/2.0.0-rc1. This vulnerability affects the function JsonHelper::UpdateArray of the file mindspore/ccsrc/minddata/dataset/util/jsonhelper.cc. The manipulation leads to memory corruption. The name of the patch is...

PYSEC-2023-81

A vulnerability classified as problematic was found in MindSpore 2.0.0-alpha/2.0.0-rc1. This vulnerability affects the function JsonHelper::UpdateArray of the file mindspore/ccsrc/minddata/dataset/util/jsonhelper.cc. The manipulation leads to memory corruption. The name of the patch is...

Memory corruption

A vulnerability classified as problematic was found in MindSpore 2.0.0-alpha/2.0.0-rc1. This vulnerability affects the function JsonHelper::UpdateArray of the file mindspore/ccsrc/minddata/dataset/util/jsonhelper.cc. The manipulation leads to memory corruption. The name of the patch is...

PYSEC-2023-81

A vulnerability classified as problematic was found in MindSpore 2.0.0-alpha/2.0.0-rc1. This vulnerability affects the function JsonHelper::UpdateArray of the file mindspore/ccsrc/minddata/dataset/util/jsonhelper.cc. The manipulation leads to memory corruption. The name of the patch is...

CVE-2023-2970 MindSpore json_helper.cc UpdateArray memory corruption

A vulnerability classified as problematic was found in MindSpore 2.0.0-alpha/2.0.0-rc1. This vulnerability affects the function JsonHelper::UpdateArray of the file mindspore/ccsrc/minddata/dataset/util/jsonhelper.cc. The manipulation leads to memory corruption. The name of the patch is...

CVE-2023-2970

CVE-2023-2970 affects MindSpore 2.0.0-alpha/2.0.0-rc1. The issue is in JsonHelper::UpdateArray within mindspore/ccsrc/minddata/dataset/util/json_helper.cc and causes memory corruption. A patch (30f4729ea2c01e1ed437ba92a81e2fc098d608a9) is available to fix the issue. No exploitation details are pr...

CVE-2023-2970 MindSpore json_helper.cc UpdateArray memory corruption

A vulnerability classified as problematic was found in MindSpore 2.0.0-alpha/2.0.0-rc1. This vulnerability affects the function JsonHelper::UpdateArray of the file mindspore/ccsrc/minddata/dataset/util/jsonhelper.cc. The manipulation leads to memory corruption. The name of the patch is...

CVE-2023-2970 MindSpore json_helper.cc UpdateArray memory corruption

A vulnerability classified as problematic was found in MindSpore 2.0.0-alpha/2.0.0-rc1. This vulnerability affects the function JsonHelper::UpdateArray of the file mindspore/ccsrc/minddata/dataset/util/jsonhelper.cc. The manipulation leads to memory corruption. The name of the patch is...

MindSpore 缓冲区错误漏洞

MindSpore is a new open source deep learning training/inference framework open-sourced by MindSpore. It can be used in mobile, edge and cloud scenarios. A buffer error vulnerability exists in MindSpore version 2.0.0-alpha, 2.0.0-rc1. An attacker exploited the vulnerability to cause memory...

PT-2023-22362 · Mindspore · Mindspore

Name of the Vulnerable Software and Affected Versions: MindSpore versions 2.0.0-alpha through 2.0.0-rc1 Description: A problematic vulnerability was found in MindSpore, affecting the JsonHelper::UpdateArray function of the file mindspore/ccsrc/minddata/dataset/util/json helper.cc. The manipulatio...

Huawei MindSpore Community numeric error vulnerability

Huawei MindSpore Community is an open source deep learning framework from Huawei China.A numerical error vulnerability exists in versions prior to Huawei MindSpore Community 1.3.0, which stems from the fact that when performing the initialization operation of the Split operator, if a dimension in...

Huawei MindSpore Community Tile信息泄露漏洞

Huawei MindSpore Community is an open source deep learning framework from Huawei China. Huawei MindSpore Community Tile is vulnerable to an information disclosure vulnerability that stems from accessing sensitive data when the input data type is not int or int32. An attacker could use this...

Huawei MindSpore Community SparseToDense信息泄露漏洞

Huawei MindSpore Community is an open source deep learning framework from Huawei China. Huawei MindSpore Community SparseToDense is vulnerable to an information disclosure vulnerability that stems from accessing sensitive data when fewer than three digits are entered. An attacker could use this...

Huawei MindSpore Community Transpose信息泄露漏洞

Huawei MindSpore Community, an open source deep learning framework from Huawei, China, is vulnerable to an information disclosure vulnerability in Huawei MindSpore Community Transpose, which results from accessing sensitive data when the value in the perm element is greater than or equal to the...

Huawei MindSpore Community Concat Information Disclosure Vulnerability

Huawei MindSpore Community is an open source deep learning framework from Huawei, China. Huawei MindSpore Community suffers from an information disclosure vulnerability that stems from accessing a shape allocated from the heap buffer if the input shape size is 0 when performing inferred shape...