PT-2022-10281
CVE-2021-33648
·
Published
2022-06-27
·
Updated
2022-07-07
Description by
CVSS 3.1
7.5
HighMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
No specific software or versions are mentioned in the provided descriptions.
Description
The issue occurs when performing inference shape operations on certain operators, including Affine, Concat, MatMul, ArgMinMax, EmbeddingLookup, and Gather. If the input shape size is 0, it can lead to accessing data outside the bounds of the allocated shape from heap buffers.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾