Environment Variable Vulnerability in Sony Neural Network Libraries
CVE-2019-10844

9.8CRITICAL

Key Information:

Vendor

Sony

Status
Neural Network Libraries
Vendor
CVE Published:
4 April 2019

What is CVE-2019-10844?

A vulnerability in the libnnabla.a component of Sony Neural Network Libraries (nnabla) allows for potential exploitation through the untrusted use of the HOME environment variable. This could lead to unauthorized access or execution of malicious code when a user environment is manipulated.

References

https://github.com/sony/nnabla/issues/209
x_refsource_MISC

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.