PT-2023-26542 · Unknown · Paddlepaddle

Tong Liu

·

CVE-2023-38669

·

Publicado

2023-07-26

·

Atualizado

2023-07-31

CVSS v3.1

8.3

Alta

VetorAV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions PaddlePaddle versions prior to 2.5.0
Description The issue is related to a use after free condition in the paddle.diagonal function. This resulted in a potentially exploitable condition.
Recommendations For versions prior to 2.5.0, update to version 2.5.0 or later to resolve the issue.

Exploit

Correção

Use After Free

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-416

Identificadores relacionados

CVE-2023-38669
GHSA-8WFH-QXXV-3Q8C
PYSEC-2023-122

Produtos afetados

Paddlepaddle