Advisoriesby IbisBaidu security advisories
32 advisories across PaddlePaddle, Baidu
PaddlePaddle allows arbitrary file read via paddle.vision.ops.read_filePaddlePaddleCVE-2024-1603no fix yetPaddlePaddle Path Traversal vulnerabilityPaddlePaddleCVE-2024-0818no fix yetPaddlePaddle vulnerable to remote code executionPaddlePaddleCVE-2024-0917no fix yetPaddlePaddle command injection in paddle.utils.download._wget_downloadPaddlePaddleCVE-2024-0815no fix yetPaddlePaddle command injection vulnerabilityPaddlePaddleCVE-2024-0817no fix yetCode Injection in paddlepaddlePaddlePaddleCVE-2024-0521fixed in 2.6.0PaddlePaddle floating point exception in paddle.argmin and paddle.argmaxPaddlePaddleCVE-2023-52313fixed in 2.6.0PaddlePaddle command injection in convert_shape_comparePaddlePaddleCVE-2023-52314fixed in 2.6.0PaddlePaddle stack overflow in paddle.searchsortedPaddlePaddleCVE-2023-52304fixed in 2.6.0PaddlePaddle heap buffer overflow in paddle.repeat_interleavePaddlePaddleCVE-2023-52309fixed in 2.6.0PaddlePaddle stack overflow in paddle.linalg.lu_unpackPaddlePaddleCVE-2023-52307fixed in 2.6.0PaddlePaddle command injection in get_online_pass_intervalPaddlePaddleCVE-2023-52310fixed in 2.6.0PaddlePaddle nullptr dereference in paddle.cropPaddlePaddleCVE-2023-52312fixed in 2.6.0PaddlePaddle command injection in _wget_downloadPaddlePaddleCVE-2023-52311fixed in 2.6.0PaddlePaddle floating point exception in paddle.lerpPaddlePaddleCVE-2023-52306fixed in 2.6.0PaddlePaddle floating point exception in paddle.topkPaddlePaddleCVE-2023-52305fixed in 2.6.0PaddlePaddle floating point exception in paddle.aminPaddlePaddleCVE-2023-52308fixed in 2.6.0PaddlePaddle segfault in paddle.put_along_axisPaddlePaddleCVE-2023-52303fixed in 2.6.0PaddlePaddle null pointer dereference in paddle.nextafterPaddlePaddleCVE-2023-52302fixed in 2.6.0PaddlePaddle floating point exception in paddle.linalg.eigPaddlePaddleCVE-2023-38677fixed in 2.6.0PaddlePaddle floating point exception in paddle.linalg.matrix_rankPaddlePaddleCVE-2023-38675fixed in 2.6.0PaddlePaddle segfault in paddle.modePaddlePaddleCVE-2023-38678fixed in 2.6.0PaddlePaddle segfault in paddle.dotPaddlePaddleCVE-2023-38676fixed in 2.6.0PaddlePaddle floating point exception in paddle.nanmedianPaddlePaddleCVE-2023-38674fixed in 2.6.0Use after free in PaddlePaddlePaddlePaddleCVE-2023-38669fixed in 2.5.0Command injection in PaddlePaddlePaddlePaddleCVE-2023-38673fixed in 2.5.0Float point exception (FPE) in paddlepaddlePaddlePaddleCVE-2023-38672fixed in 2.5.0Heap buffer overflow in PaddlePaddlePaddlePaddleCVE-2023-38671fixed in 2.5.0Null pointer dereference in PaddlePaddlePaddlePaddleCVE-2023-38670fixed in 2.5.0PaddlePaddle Out-of-bounds Read vulnerabilityPaddlePaddleCVE-2022-46741fixed in 2.4PaddlePaddle vulnerable to Code InjectionPaddlePaddleCVE-2022-46742fixed in 2.4.0PaddlePaddle vulnerable to code injection via winstrPaddlePaddleCVE-2022-45908fixed in 2.4