paddlepaddle vulnerabilities
CVEs whose affected-version data names the paddlepaddle package (pip). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
32 CVEsRSS
CVE-2024-1603High· 7.5PaddlePaddle allows arbitrary file read via paddle.vision.ops.read_file
PaddlePaddle allows arbitrary file read via paddle.vision.ops.read_file
CVE-2024-0917Critical· 9.8PaddlePaddle vulnerable to remote code execution
PaddlePaddle vulnerable to remote code execution
CVE-2024-0818Critical· 9.1PaddlePaddle Path Traversal vulnerability
PaddlePaddle Path Traversal vulnerability
CVE-2024-0815High· 8.8PaddlePaddle command injection in paddle.utils.download._wget_download
PaddlePaddle command injection in paddle.utils.download._wget_download
CVE-2024-0817High· 7.8PaddlePaddle command injection vulnerability
PaddlePaddle command injection vulnerability
CVE-2024-0521Critical· 9.3Code Injection in paddlepaddle
Code Injection in paddlepaddle
CVE-2023-38674Medium· 4.7PaddlePaddle floating point exception in paddle.nanmedian
PaddlePaddle floating point exception in paddle.nanmedian
CVE-2023-38676Medium· 4.7PaddlePaddle segfault in paddle.dot
PaddlePaddle segfault in paddle.dot
CVE-2023-52308Medium· 4.7PaddlePaddle floating point exception in paddle.amin
PaddlePaddle floating point exception in paddle.amin
CVE-2023-52305Medium· 4.7PaddlePaddle floating point exception in paddle.topk
PaddlePaddle floating point exception in paddle.topk
CVE-2023-52306Medium· 4.7PaddlePaddle floating point exception in paddle.lerp
PaddlePaddle floating point exception in paddle.lerp
CVE-2023-52311Critical· 9.6PaddlePaddle command injection in _wget_download
PaddlePaddle command injection in _wget_download
CVE-2023-52312Medium· 4.7PaddlePaddle nullptr dereference in paddle.crop
PaddlePaddle nullptr dereference in paddle.crop
CVE-2023-38678Medium· 4.7PaddlePaddle segfault in paddle.mode
PaddlePaddle segfault in paddle.mode
CVE-2023-38675Medium· 4.7PaddlePaddle floating point exception in paddle.linalg.matrix_rank
PaddlePaddle floating point exception in paddle.linalg.matrix_rank
CVE-2023-52310Critical· 9.6PaddlePaddle command injection in get_online_pass_interval
PaddlePaddle command injection in get_online_pass_interval
CVE-2023-52307High· 8.2PaddlePaddle stack overflow in paddle.linalg.lu_unpack
PaddlePaddle stack overflow in paddle.linalg.lu_unpack
CVE-2023-38677Medium· 4.7PaddlePaddle floating point exception in paddle.linalg.eig
PaddlePaddle floating point exception in paddle.linalg.eig
CVE-2023-52309High· 8.2PaddlePaddle heap buffer overflow in paddle.repeat_interleave
PaddlePaddle heap buffer overflow in paddle.repeat_interleave
CVE-2023-52302Medium· 4.7PaddlePaddle null pointer dereference in paddle.nextafter
PaddlePaddle null pointer dereference in paddle.nextafter
CVE-2023-52304High· 8.2PaddlePaddle stack overflow in paddle.searchsorted
PaddlePaddle stack overflow in paddle.searchsorted
CVE-2023-52314Critical· 9.6PaddlePaddle command injection in convert_shape_compare
PaddlePaddle command injection in convert_shape_compare
CVE-2023-52303Medium· 4.7PaddlePaddle segfault in paddle.put_along_axis
PaddlePaddle segfault in paddle.put_along_axis
CVE-2023-52313Medium· 4.7PaddlePaddle floating point exception in paddle.argmin and paddle.argmax
PaddlePaddle floating point exception in paddle.argmin and paddle.argmax
CVE-2023-38670Medium· 4.7Null pointer dereference in PaddlePaddle
Null pointer dereference in PaddlePaddle
CVE-2023-38671High· 8.3Heap buffer overflow in PaddlePaddle
Heap buffer overflow in PaddlePaddle
CVE-2023-38672Medium· 4.7Float point exception (FPE) in paddlepaddle
Float point exception (FPE) in paddlepaddle
CVE-2023-38673Critical· 9.6Command injection in PaddlePaddle
Command injection in PaddlePaddle
CVE-2023-38669High· 8.3Use after free in PaddlePaddle
Use after free in PaddlePaddle
CVE-2022-46742Critical· 9.8PaddlePaddle vulnerable to Code Injection
PaddlePaddle vulnerable to Code Injection