Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

18 records

Release: PaddlePaddle 2.6.0 Clear all filters
TI-2023-28705 CVE-2023-52314 · GHSA-3cr5-2446-8pg3

Command injection in convert_shape_compare

Priority HIGH 76

PaddlePaddle before 2.6.0 has a command injection in convert_shape_compare.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01182 Published 2024-01-03 Fixed in 2.6.0 CWE-78
TI-2023-28704 CVE-2023-52313 · GHSA-275c-w5mq-v5m2

FPE in paddle.argmin and paddle.argmax

Priority LOW 33

FPE in paddle.argmin and paddle.argmax in PaddlePaddle before 2.6.0.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00484 Published 2024-01-03 Fixed in 2.6.0 CWE-369
TI-2023-28703 CVE-2023-52312 · GHSA-qppw-c37g-xwcc

Null pointer dereference in paddle.crop

Priority LOW 33

Nullptr dereference in paddle.crop in PaddlePaddle before 2.6.0.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00484 Published 2024-01-03 Fixed in 2.6.0 CWE-476
TI-2023-28702 CVE-2023-52311 · GHSA-rf7p-79xq-8xwm

Command injection in _wget_download

Priority HIGH 82

PaddlePaddle before 2.6.0 has a command injection in _wget_download.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01172 Published 2024-01-03 Fixed in 2.6.0 CWE-78
TI-2023-28701 CVE-2023-52310 · GHSA-j5h9-9r39-43q5

Command injection in get_online_pass_interval

Priority HIGH 82

PaddlePaddle before 2.6.0 has a command injection in get_online_pass_interval.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01172 Published 2024-01-03 Fixed in 2.6.0 CWE-78
TI-2023-28700 CVE-2023-52309 · GHSA-8fp7-jwv2-49x9

Buffer overflow in PaddlePaddle

Priority MEDIUM 43

Heap buffer overflow in paddle.repeat_interleave in PaddlePaddle before 2.6.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00538 Published 2024-01-03 Fixed in 2.6.0 CWE-120
TI-2023-28699 CVE-2023-52308 · GHSA-v9pg-qw6x-w5r2

FPE in paddle.amin

Priority HIGH 66

FPE in paddle.amin in PaddlePaddle before 2.6.0.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00484 Published 2024-01-03 Fixed in 2.6.0 CWE-369
TI-2023-28698 CVE-2023-52307 · GHSA-g57v-2687-jx33

Buffer overflow in PaddlePaddle

Priority HIGH 75

Stack overflow in paddle.linalg.lu_unpack in PaddlePaddle before 2.6.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00529 Published 2024-01-03 Fixed in 2.6.0 CWE-120
TI-2023-28697 CVE-2023-52306 · GHSA-rg9q-m8hv-xxr6

FPE in paddle.lerp

Priority LOW 33

FPE in paddle.lerp in PaddlePaddle before 2.6.0.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00484 Published 2024-01-03 Fixed in 2.6.0 CWE-369
TI-2023-28696 CVE-2023-52305 · GHSA-rx2r-q96c-w5cc

FPE in paddle.topk

Priority LOW 33

FPE in paddle.topk in PaddlePaddle before 2.6.0.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00484 Published 2024-01-03 Fixed in 2.6.0 CWE-369
TI-2023-28695 CVE-2023-52304 · GHSA-4rrv-8gcp-24v8

Buffer overflow in PaddlePaddle

Priority HIGH 76

Stack overflow in paddle.searchsorted in PaddlePaddle before 2.6.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00576 Published 2024-01-03 Fixed in 2.6.0 CWE-120
TI-2023-28694 CVE-2023-52303 · GHSA-2wcj-qr76-9768

Segfault in paddle.put_along_axis

Priority HIGH 72

Nullptr in paddle.put_along_axis in PaddlePaddle before 2.6.0.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00484 Published 2024-01-03 Fixed in 2.6.0 CWE-476
TI-2023-28693 CVE-2023-52302 · GHSA-547m-23x7-cxg5

Segfault in paddle.nextafter

Priority HIGH 66

Nullptr in paddle.nextafter in PaddlePaddle before 2.6.0.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00541 Published 2024-01-03 Fixed in 2.6.0 CWE-476
TI-2023-20027 CVE-2023-38678 · GHSA-mr78-v55p-7777

Segfault in paddle.mode

Priority LOW 33

OOB access in paddle.mode in PaddlePaddle before 2.6.0.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00484 Published 2024-01-03 Fixed in 2.6.0 CWE-125
TI-2023-20026 CVE-2023-38677 · GHSA-c6ph-m8cw-rfqh

FPE in paddle.linalg.eig

Priority HIGH 72

FPE in paddle.linalg.eig in PaddlePaddle before 2.6.0.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00484 Published 2024-01-03 Fixed in 2.6.0 CWE-369
TI-2023-20025 CVE-2023-38676 · GHSA-x3q9-c788-j7c8

Segfault in paddle.dot

Priority LOW 33

Nullptr in paddle.dot in PaddlePaddle before 2.6.0.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00484 Published 2024-01-03 Fixed in 2.6.0 CWE-476
TI-2023-20024 CVE-2023-38675 · GHSA-jm68-fpmr-8j2g

FPE in paddle.linalg.matrix_rank

Priority HIGH 66

FPE in paddle.linalg.matrix_rank in PaddlePaddle before 2.6.0.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00484 Published 2024-01-03 Fixed in 2.6.0 CWE-369
TI-2023-20023 CVE-2023-38674 · GHSA-xjpw-hx47-rccv

FPE in paddle.nanmedian

Priority HIGH 66

FPE in paddle.nanmedian in PaddlePaddle before 2.6.0.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00484 Published 2024-01-03 Fixed in 2.6.0 CWE-369