Vulnerabilities for paddlepaddle

First version without a known vulnerability: 3.0.0b2

Details

• GHSA-jwrc-3v3f-5cq52024-03-23

  PaddlePaddle allows arbitrary file read via paddle.vision.ops.read_file

• GHSA-2rp8-hff9-c5wr2024-03-07

  PaddlePaddle Path Traversal vulnerability

• GHSA-mrmm-qmrj-xgp62024-03-07

  PaddlePaddle vulnerable to remote code execution

• GHSA-qqv2-35q8-p2g22024-03-07

  PaddlePaddle command injection in paddle.utils.download._wget_download

  Fixed in: 3.0.0-beta0

• GHSA-fh54-3vhg-mpc22024-03-07

  PaddlePaddle command injection vulnerability

  Fixed in: 3.0.0-beta0

• GHSA-chj7-w3f6-cvfj2024-01-20

  Code Injection in paddlepaddle

  Fixed in: 2.6.0

• GHSA-275c-w5mq-v5m22024-01-03

  PaddlePaddle floating point exception in paddle.argmin and paddle.argmax

  Fixed in: 2.6.0

• GHSA-3cr5-2446-8pg32024-01-03

  PaddlePaddle command injection in convert_shape_compare

  Fixed in: 2.6.0

• GHSA-4rrv-8gcp-24v82024-01-03

  PaddlePaddle stack overflow in paddle.searchsorted

  Fixed in: 2.6.0

• GHSA-8fp7-jwv2-49x92024-01-03

  PaddlePaddle heap buffer overflow in paddle.repeat_interleave

  Fixed in: 2.6.0

• GHSA-g57v-2687-jx332024-01-03

  PaddlePaddle stack overflow in paddle.linalg.lu_unpack

  Fixed in: 2.6.0

• GHSA-j5h9-9r39-43q52024-01-03

  PaddlePaddle command injection in get_online_pass_interval

  Fixed in: 2.6.0

• GHSA-qppw-c37g-xwcc2024-01-03

  PaddlePaddle nullptr dereference in paddle.crop

  Fixed in: 2.6.0, 2.6.1

• GHSA-rf7p-79xq-8xwm2024-01-03

  PaddlePaddle command injection in _wget_download

  Fixed in: 2.6.0

• GHSA-rg9q-m8hv-xxr62024-01-03

  PaddlePaddle floating point exception in paddle.lerp

  Fixed in: 2.6.0

• GHSA-rx2r-q96c-w5cc2024-01-03

  PaddlePaddle floating point exception in paddle.topk

  Fixed in: 2.6.0

• GHSA-v9pg-qw6x-w5r22024-01-03

  PaddlePaddle floating point exception in paddle.amin

  Fixed in: 2.6.0

• GHSA-2wcj-qr76-97682024-01-03

  PaddlePaddle segfault in paddle.put_along_axis

  Fixed in: 2.6.0

• GHSA-547m-23x7-cxg52024-01-03

  PaddlePaddle null pointer dereference in paddle.nextafter

  Fixed in: 2.6.0

• GHSA-c6ph-m8cw-rfqh2024-01-03

  PaddlePaddle floating point exception in paddle.linalg.eig

  Fixed in: 2.6.0

• GHSA-jm68-fpmr-8j2g2024-01-03

  PaddlePaddle floating point exception in paddle.linalg.matrix_rank

  Fixed in: 2.6.0

• GHSA-mr78-v55p-77772024-01-03

  PaddlePaddle segfault in paddle.mode

  Fixed in: 2.6.0

• GHSA-x3q9-c788-j7c82024-01-03

  PaddlePaddle segfault in paddle.dot

  Fixed in: 2.6.0

• GHSA-xjpw-hx47-rccv2024-01-03

  PaddlePaddle floating point exception in paddle.nanmedian

  Fixed in: 2.6.0

• GHSA-8wfh-qxxv-3q8c2023-07-26

  Use after free in PaddlePaddle

  Fixed in: 2.5.0

• GHSA-9q9v-qgwx-84mr2023-07-26

  Command injection in PaddlePaddle

  Fixed in: 2.5.0

• GHSA-cv2j-922j-hr562023-07-26

  Float point exception (FPE) in paddlepaddle

  Fixed in: 2.5.0

• GHSA-hh7p-hvm3-rg882023-07-26

  Heap buffer overflow in PaddlePaddle

  Fixed in: 2.5.0

• GHSA-rr46-m366-gm442023-07-26

  Null pointer dereference in PaddlePaddle

  Fixed in: 2.5.0

• GHSA-2hvc-hwg3-hpvw2022-12-07

  PaddlePaddle Out-of-bounds Read vulnerability

  Fixed in: 2.4

• GHSA-gcjf-29m9-888q2022-12-07

  PaddlePaddle vulnerable to Code Injection

  Fixed in: 2.4.0

• GHSA-83g7-8fch-p37m2022-11-26

  PaddlePaddle vulnerable to code injection via winstr

  Fixed in: 2.4