CVEvulnerability

CVE-2021-33650

7.5 HIGH Published 2022-06-27 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2022-06-27
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
Weaknesses
CWE-125

Description

When performing the inference shape operation of the SparseToDense operator, if the number of inputs is less than three, it will access data outside of bounds of inputs which allocated from heap buffers.

Affected configurations

• mindspore mindspore (>= 1.2.0 < 1.3.0)

Related

Weakness · CWE (1)

  • CWE-125 Out-of-bounds Read weakness

References