PYSEC-2024-144

Nullptr dereference in paddle.cropin PaddlePaddle before 2.6.0. This flaw can cause a runtime crash and a denial of service...

CVE-2023-52302

CVE-2023-52302 concerns a NULL pointer dereference in the paddle.nextafter implementation inside PaddlePaddle. Multiple connected sources describe that this flaw can cause a runtime crash, leading to a Denial of Service. The affected component is PaddlePaddle’s paddle.nextafter function; the impa...

PT-2024-14516 · Unknown · Paddlepaddle

Name of the Vulnerable Software and Affected Versions: PaddlePaddle versions prior to 2.6.0 Description: A heap buffer overflow flaw exists in the paddle.repeat interleave function. This issue can lead to a denial of service, information disclosure, or potentially more severe damage...

PT-2024-12758 · Unknown · Paddlepaddle

Name of the Vulnerable Software and Affected Versions: PaddlePaddle versions prior to 2.6.0 Description: This issue is related to a null pointer in paddle.dot, which can cause a runtime crash and a denial of service. Recommendations: For versions prior to 2.6.0, update to version 2.6.0 or later t...

PT-2024-14515 · Unknown · Paddlepaddle

Name of the Vulnerable Software and Affected Versions: PaddlePaddle versions prior to 2.6.0 Description: The issue is related to a flaw in paddle.amin that can cause a runtime crash and a denial of service. Recommendations: For versions prior to 2.6.0, update to version 2.6.0 or later to resolve...

PT-2024-14512 · Unknown · Paddlepaddle

Name of the Vulnerable Software and Affected Versions: PaddlePaddle versions prior to 2.6.0 Description: The issue is related to a flaw in the paddle.topk function, which can cause a runtime crash and a denial of service. Recommendations: For versions prior to 2.6.0, update to version 2.6.0 or...

PYSEC-2023-125

FPE in paddle.trace in PaddlePaddle before 2.5.0. This flaw can cause a runtime crash and a denial of service...

PYSEC-2023-123

Null pointer dereference in paddle.flip in PaddlePaddle before 2.5.0. This resulted in a runtime crash and denial of service...

PYSEC-2023-124

Heap buffer overflow in paddle.trace in PaddlePaddle before 2.5.0. This flaw can lead to a denial of service, information disclosure, or more damage is possible...

PYSEC-2023-122

Use after free in paddle.diagonal in PaddlePaddle before 2.5.0. This resulted in a potentially exploitable condition...

CVE-2023-38669

Use after free in paddle.diagonal in PaddlePaddle before 2.5.0. This resulted in a potentially exploitable condition...

PaddlePaddle 代码问题漏洞

PaddlePaddle is an independent R&D deep learning platform open-sourced by China's PaddlePaddle. PaddlePaddle version 2.5.0 before there is a security vulnerability , the vulnerability stems from the PaddlePaddle paddle.flip function in the existence of a null pointer dereference Null pointer...

PaddlePaddle 数字错误漏洞

PaddlePaddle PaddlePaddle is an independent R&D deep learning platform open-sourced by China's PaddlePaddle PaddlePaddle. A security vulnerability exists in PaddlePaddle versions prior to 2.5.0, which stems from a Floating Point Exception FPE vulnerability in PaddlePaddle's paddle.trace function,...

PT-2023-26544

Name of the Vulnerable Software and Affected Versions PaddlePaddle versions prior to 2.5.0 Description The issue is related to a heap buffer overflow in paddle.trace, which can lead to a denial of service, information disclosure, or potentially more severe damage. Recommendations For versions pri...

PYSEC-2022-43063

Code injection in paddle.audio.functional.getwindow in PaddlePaddle 2.4.0-rc0 allows arbitrary code execution...

PT-2022-27976 · Unknown · Paddlepaddle

Name of the Vulnerable Software and Affected Versions: PaddlePaddle version 2.4.0-rc0 Description: The issue allows for code injection in the paddle.audio.functional.get window function, enabling arbitrary code execution. Recommendations: For PaddlePaddle version 2.4.0-rc0, consider applying the...

PT-2022-27677

Name of the Vulnerable Software and Affected Versions PaddlePaddle versions prior to 2.4 Description The issue arises from the paddle.audio.functional.get window function calling eval on a user-supplied winstr, leading to potential code injection and arbitrary code execution. Recommendations For...

vancouverpaddlewheeler.com Improper Access Control vulnerability OBB-2174815

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...