GitHub Advisoryadvisory · PyPI

GHSA-hh7p-hvm3-rg88 Heap buffer overflow in PaddlePaddle

HIGH Published 2023-07-26 Modified 2023-07-31 Official page ↗
Aliases
CVE-2023-38671
Ecosystem
PyPI
Packages
paddlepaddle
Severity
High
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
Weaknesses
CWE-120, CWE-787
Reviewed
2023-07-26

Affected packages

• PyPI paddlepaddle: < 2.5.0 → fixed in 2.5.0

Description

Heap buffer overflow in paddle.trace in PaddlePaddle before 2.5.0. This flaw can lead to a denial of service, information disclosure, or more damage is possible.

Related

Alias · CVE (1)

  • CVE-2023-38671 Heap buffer overflow in paddle.trace in PaddlePaddle before 2.5.0. vulnerability

Weakness · CWE (2)

  • CWE-120 Buffer Copy without Checking Size of Input weakness
  • CWE-787 Out-of-bounds Write weakness

References