CVE-2021-33647

When performing the inference shape operation of the Tile operator, if the input data type is not int or int32, it will access data outside of bounds of heap allocated buffers...

CVE-2021-33648

When performing the inference shape operation of Affine, Concat, MatMul, ArgMinMax, EmbeddingLookup, and Gather operators, if the input shape size is 0, it will access data outside of bounds of shape which allocated from heap buffers...

CVE-2021-33648

CVE-2021-33648 affects Huawei MindSpore Community’s shape-inference logic for operators including Affine , Concat , MatMul , ArgMinMax , EmbeddingLookup , and Gather . When the input shape size is 0, the code may access data outside of the heap-allocated shape, causing an information-disclosure-t...

Huawei MindSpore Community数字错误漏洞

Huawei MindSpore Community is an open source deep learning framework from Huawei, China. A security vulnerability exists in Huawei MindSpore Community versions prior to 1.3.0, which stems from a divide-by-0 exception when performing the derived shape operation of the SpaceToBatch operator if the...

CVE-2021-33648: Out-of-bounds Read

When performing the inference shape operation of Affine, Concat, MatMul, ArgMinMax, EmbeddingLookup, and Gather operators, if the input shape size is 0, it will access data outside of bounds of shape which allocated from heap buffers...

PT-2022-10281

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided descriptions. Description The issue occurs when performing inference shape operations on certain operators, including Affine, Concat, MatMul, ArgMinMax, EmbeddingLookup, and Gather...

PT-2022-10282

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided descriptions. Description The issue arises during the inference shape operation of the Transpose operator. If the value in the perm element is greater than or equal to the size of...

PT-2022-10286

Name of the Vulnerable Software and Affected Versions TensorFlow versions affected versions not specified Description The issue arises when the SpaceToBatch operator performs the derivation shape operation and encounters a value of 0 in the block shape element, leading to a division by 0 exceptio...

CVE-2021-33654: Divide By Zero

When performing the initialization operation of the Split operator, if a dimension in the input shape is 0, it will cause a division by 0 exception...

Huawei MindSpore Community 缓冲区错误漏洞

Huawei MindSpore Community is an open source deep learning framework from Huawei, China. Huawei MindSpore Community suffers from an information disclosure vulnerability that stems from accessing a shape allocated from the heap buffer if the input shape size is 0 when performing inferred shape...

Huawei MindSpore Community 缓冲区错误漏洞

Huawei MindSpore Community, an open source deep learning framework from Huawei, China, is vulnerable to an information disclosure vulnerability in Huawei MindSpore Community Transpose, which results from accessing sensitive data when the value in the perm element is greater than or equal to the...

CVE-2021-33647: Out-of-bounds Write

When performing the inference shape operation of the Tile operator, if the input data type is not int or int32, it will access data outside of bounds of heap allocated buffers...

PT-2022-10280

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided descriptions. Description The issue occurs when performing the inference shape operation of the Tile operator. If the input data type is not int or int32, it will access data outsi...

ALPINE-CVE-2022-33068

An integer overflow in the component hb-ot-shape-fallback.cc of Harfbuzz v4.3.0 allows attackers to cause a Denial of Service DoS via unspecified vectors...

CVE-2022-33068

An integer overflow in the component hb-ot-shape-fallback.cc of Harfbuzz v4.3.0 allows attackers to cause a Denial of Service DoS via unspecified vectors...

Integer overflow

An integer overflow in the component hb-ot-shape-fallback.cc of Harfbuzz v4.3.0 allows attackers to cause a Denial of Service DoS via unspecified vectors...

UBUNTU-CVE-2022-33068

An integer overflow in the component hb-ot-shape-fallback.cc of Harfbuzz v4.3.0 allows attackers to cause a Denial of Service DoS via unspecified vectors...

HarfBuzz 输入验证错误漏洞

HarfBuzz is a text engine for OpenType fonts. HarfBuzz v4.3.0 is vulnerable to a denial of service vulnerability caused by an integer overflow in the hb-ot-shape-fallback.cc component, which can be exploited to cause a denial of service DoS via an unspecified vector...

CVE-2022-33068

An integer overflow in the component hb-ot-shape-fallback.cc of Harfbuzz v4.3.0 allows attackers to cause a Denial of Service DoS via unspecified vectors...

PT-2022-4310

Name of the Vulnerable Software and Affected Versions Harfbuzz version 4.3.0 Description The issue is related to an integer overflow in the hb-ot-shape-fallback.cc component of the Harfbuzz library, which can be exploited by attackers to cause a Denial of Service DoS via unspecified vectors. This...