Lucene search
Veracode Vulnerability DatabaseVERACODE:41784HistoryJul 27, 2023 - 5:16 a.m.
Use After Free
2023-07-2705:16:41
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
paddlepaddle
use after free
vulnerability
diagonalinfermeta
unary.cc
application crash
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
0.002
Percentile
57.0%
paddlepaddle is vulnerable to Use After Free. The vulnerability exists due to the lack of range checks in the axis1 parameter in the DiagonalInferMeta function of unary.cc, allowing an attacker to cause an application crash.
Related
osv
osv
PYSEC-2023-122
2023-07-26 10:15:00
CVE-2023-38669
2023-07-26 10:15:11
Use after free in PaddlePaddle
2023-07-26 12:30:28
cve
cve
CVE-2023-38669
2023-07-26 10:15:11
github
github
Use after free in PaddlePaddle
2023-07-26 12:30:28
cvelist
cvelist
CVE-2023-38669
2023-07-26 09:29:39
prion
prion
Design/Logic Flaw
2023-07-26 10:15:00
nvd
nvd
CVE-2023-38669
2023-07-26 10:15:11
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
0.002
Percentile
57.0%
Related for VERACODE:41784