paddlepaddle

Vulnerabilities (32)

• CVE-2024-1603HigMar 23, 2024
  affected <= 2.6.0

  paddlepaddle/paddle 2.6.0 allows arbitrary file read via paddle.vision.ops.read_file.

• CVE-2024-0818CriMar 7, 2024
  affected <= 2.6.0

  Arbitrary File Overwrite Via Path Traversal in paddlepaddle/paddle before 2.6

• CVE-2024-0917CriMar 7, 2024
  affected <= 2.6.0

  remote code execution in paddlepaddle/paddle 2.6.0

• CVE-2024-0815HigMar 7, 2024
  affected <= 2.6.0

  Command injection in paddle.utils.download._wget_download (bypass filter) in paddlepaddle/paddle 2.6.0

• CVE-2024-0817HigMar 7, 2024
  affected <= 2.6.0

  Command injection in IrGraph.draw in paddlepaddle/paddle 2.6.0

• CVE-2024-0521HigJan 20, 2024
  affected < 2.6.0fixed 2.6.0

  Code Injection in paddlepaddle/paddle

• CVE-2023-52314CriJan 3, 2024
  affected < 2.6.0fixed 2.6.0

  PaddlePaddle before 2.6.0 has a command injection in convert_shape_compare. This resulted in the ability to execute arbitrary commands on the operating system.

• CVE-2023-52313MedJan 3, 2024
  affected < 2.6.0fixed 2.6.0

  FPE in paddle.argmin and paddle.argmax in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash and a denial of service.

• CVE-2023-52312MedJan 3, 2024
  affected < 2.6.0fixed 2.6.0

  Nullptr dereference in paddle.crop in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash and a denial of service.

• CVE-2023-52311CriJan 3, 2024
  affected < 2.6.0fixed 2.6.0

  PaddlePaddle before 2.6.0 has a command injection in _wget_download. This resulted in the ability to execute arbitrary commands on the operating system.

• CVE-2023-52310CriJan 3, 2024
  affected < 2.6.0fixed 2.6.0

  PaddlePaddle before 2.6.0 has a command injection in get_online_pass_interval. This resulted in the ability to execute arbitrary commands on the operating system.

• CVE-2023-52309HigJan 3, 2024
  affected < 2.6.0fixed 2.6.0

  Heap buffer overflow in paddle.repeat_interleave in PaddlePaddle before 2.6.0. This flaw can lead to a denial of service, information disclosure, or more damage is possible.

• CVE-2023-52308MedJan 3, 2024
  affected < 2.6.0fixed 2.6.0

  FPE in paddle.amin in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash and a denial of service.

• CVE-2023-52307HigJan 3, 2024
  affected < 2.6.0fixed 2.6.0

  Stack overflow in paddle.linalg.lu_unpack in PaddlePaddle before 2.6.0. This flaw can lead to a denial of service, or even more damage.

• CVE-2023-52306MedJan 3, 2024
  affected < 2.6.0fixed 2.6.0

  FPE in paddle.lerp in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash and a denial of service.

• CVE-2023-52305MedJan 3, 2024
  affected < 2.6.0fixed 2.6.0

  FPE in paddle.topk in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash and a denial of service.

• CVE-2023-52304HigJan 3, 2024
  affected < 2.6.0fixed 2.6.0

  Stack overflow in paddle.searchsorted in PaddlePaddle before 2.6.0. This flaw can lead to a denial of service, or even more damage.

• CVE-2023-52303MedJan 3, 2024
  affected < 2.6.0fixed 2.6.0

  Nullptr in paddle.put_along_axis in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash and a denial of service.

• CVE-2023-52302MedJan 3, 2024
  affected < 2.6.0fixed 2.6.0

  Nullptr in paddle.nextafter in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash and a denial of service.

• CVE-2023-38678MedJan 3, 2024
  affected < 2.6.0fixed 2.6.0

  OOB access in paddle.mode in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash and a denial of service.