Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

Release: PaddlePaddle 2.5.0 Clear all filters
TI-2023-20022 CVE-2023-38673 · GHSA-9q9v-qgwx-84mr

Command injection in fs.py

Priority HIGH 76

PaddlePaddle before 2.5.0 has a command injection in fs.py.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02319 Published 2023-07-26 Fixed in 2.5.0 CWE-78
TI-2023-20021 CVE-2023-38672 · GHSA-cv2j-922j-hr56

FPE in paddle.linalg.matrix_power

Priority HIGH 72

FPE in paddle.trace in PaddlePaddle before 2.5.0.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00739 Published 2023-07-26 Fixed in 2.5.0 CWE-369
TI-2023-20020 CVE-2023-38671 · GHSA-hh7p-hvm3-rg88

Buffer overflow in PaddlePaddle

Priority HIGH 82

Heap buffer overflow in paddle.trace in PaddlePaddle before 2.5.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00749 Published 2023-07-26 Fixed in 2.5.0 CWE-120
TI-2023-20019 CVE-2023-38670 · GHSA-rr46-m366-gm44

NULL pointer dereference in PaddlePaddle

Priority MEDIUM 40

Null pointer dereference in paddle.flip in PaddlePaddle before 2.5.0.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00652 Published 2023-07-26 Fixed in 2.5.0 CWE-476
TI-2023-20018 CVE-2023-38669 · GHSA-8wfh-qxxv-3q8c

Use after free in PaddlePaddle

Priority HIGH 76

Use after free in paddle.diagonal in PaddlePaddle before 2.5.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00764 Published 2023-07-26 Fixed in 2.5.0 CWE-416