Stack overflow in paddle.searchsorted

CVE-2023-52304

What is CVE-2023-52304?

A vulnerability exists in PaddlePaddle, specifically in the paddle.searchsorted function, which is present in versions before 2.6.0. This vulnerability manifests as a stack overflow, potentially enabling an attacker to disrupt service availability. As a result, systems leveraging PaddlePaddle could face significant operational challenges if this flaw is exploited. Prompt action to update to a non-vulnerable version is critical to maintaining the integrity and reliability of applications using this software.

References