Heap buffer overflow in paddle.repeat_interleave
CVE-2023-52309

8.2HIGH

Key Information:

Vendor
CVE Published:
3 January 2024

What is CVE-2023-52309?

A vulnerability exists in PaddlePaddle affecting versions before 2.6.0, specifically in the paddle.repeat_interleave function. This heap buffer overflow can be exploited, potentially leading to denial of service and the possibility of information disclosure, putting systems using affected versions at risk of significant disruptions and data leaks.

Affected Version(s)

PaddlePaddle 0 < 2.6.0

References

CVSS V3.1

Score:
8.2
Severity:
HIGH
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.