CVEvulnerability
CVE-2021-33647
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2022-06-27
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-787
Description
When performing the inference shape operation of the Tile operator, if the input data type is not int or int32, it will access data outside of bounds of heap allocated buffers.
Affected configurations
• mindspore mindspore (>= 1.0.0 < 1.3.0)
• mindspore mindspore 0.7.0
Related
Weakness · CWE (1)
- CWE-787 Out-of-bounds Write weakness
References
- https://gitee.com/mindspore/community/blob/master/security/security_advisory_list/mssa-2021-008_en.md Patch, Third Party Advisory
- https://gitee.com/mindspore/community/blob/master/security/security_advisory_list/mssa-2021-008_en.md Patch, Third Party Advisory