paddlepaddle has 32 CVEs on record between 2022 and 2024. The median CVSS is 8.0 (high), with 10 rated critical. None have a confirmed exploitation report.
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 8.0
- Publish → KEV
- —
- Last 90 days
- 0 prev 0
Products
- paddlepaddle 32
Worst active — by depth score
CVE-2024-0917Critical· 9.8PaddlePaddle vulnerable to remote code execution54CVE-2022-46742Critical· 9.8PaddlePaddle vulnerable to Code Injection54CVE-2022-45908Critical· 9.8PaddlePaddle vulnerable to code injection via winstr54CVE-2023-52314Critical· 9.6PaddlePaddle command injection in convert_shape_compare53CVE-2023-52311Critical· 9.6PaddlePaddle command injection in _wget_download53
paddlepaddle vulnerabilities
CVEs affecting paddlepaddle, newest first. Open any entry for full detail, references, and exploit status.
32 CVEsRSS
CVE-2024-1603High· 7.5PaddlePaddle allows arbitrary file read via paddle.vision.ops.read_file
PaddlePaddle allows arbitrary file read via paddle.vision.ops.read_file
CVE-2024-0917Critical· 9.8PaddlePaddle vulnerable to remote code execution
PaddlePaddle vulnerable to remote code execution
CVE-2024-0818Critical· 9.1PaddlePaddle Path Traversal vulnerability
PaddlePaddle Path Traversal vulnerability
CVE-2024-0815High· 8.8PaddlePaddle command injection in paddle.utils.download._wget_download
PaddlePaddle command injection in paddle.utils.download._wget_download
CVE-2024-0817High· 7.8PaddlePaddle command injection vulnerability
PaddlePaddle command injection vulnerability
CVE-2024-0521Critical· 9.3Code Injection in paddlepaddle
Code Injection in paddlepaddle
CVE-2023-38674Medium· 4.7PaddlePaddle floating point exception in paddle.nanmedian
PaddlePaddle floating point exception in paddle.nanmedian
CVE-2023-38676Medium· 4.7PaddlePaddle segfault in paddle.dot
PaddlePaddle segfault in paddle.dot
CVE-2023-52308Medium· 4.7PaddlePaddle floating point exception in paddle.amin
PaddlePaddle floating point exception in paddle.amin
CVE-2023-52305Medium· 4.7PaddlePaddle floating point exception in paddle.topk
PaddlePaddle floating point exception in paddle.topk
CVE-2023-52306Medium· 4.7PaddlePaddle floating point exception in paddle.lerp
PaddlePaddle floating point exception in paddle.lerp
CVE-2023-52311Critical· 9.6PaddlePaddle command injection in _wget_download
PaddlePaddle command injection in _wget_download
CVE-2023-52312Medium· 4.7PaddlePaddle nullptr dereference in paddle.crop
PaddlePaddle nullptr dereference in paddle.crop
CVE-2023-38678Medium· 4.7PaddlePaddle segfault in paddle.mode
PaddlePaddle segfault in paddle.mode
CVE-2023-38675Medium· 4.7PaddlePaddle floating point exception in paddle.linalg.matrix_rank
PaddlePaddle floating point exception in paddle.linalg.matrix_rank
CVE-2023-52310Critical· 9.6PaddlePaddle command injection in get_online_pass_interval
PaddlePaddle command injection in get_online_pass_interval
CVE-2023-52307High· 8.2PaddlePaddle stack overflow in paddle.linalg.lu_unpack
PaddlePaddle stack overflow in paddle.linalg.lu_unpack
CVE-2023-38677Medium· 4.7PaddlePaddle floating point exception in paddle.linalg.eig
PaddlePaddle floating point exception in paddle.linalg.eig
CVE-2023-52309High· 8.2PaddlePaddle heap buffer overflow in paddle.repeat_interleave
PaddlePaddle heap buffer overflow in paddle.repeat_interleave
CVE-2023-52302Medium· 4.7PaddlePaddle null pointer dereference in paddle.nextafter
PaddlePaddle null pointer dereference in paddle.nextafter
CVE-2023-52304High· 8.2PaddlePaddle stack overflow in paddle.searchsorted
PaddlePaddle stack overflow in paddle.searchsorted
CVE-2023-52314Critical· 9.6PaddlePaddle command injection in convert_shape_compare
PaddlePaddle command injection in convert_shape_compare
CVE-2023-52303Medium· 4.7PaddlePaddle segfault in paddle.put_along_axis
PaddlePaddle segfault in paddle.put_along_axis
CVE-2023-52313Medium· 4.7PaddlePaddle floating point exception in paddle.argmin and paddle.argmax
PaddlePaddle floating point exception in paddle.argmin and paddle.argmax
CVE-2023-38670Medium· 4.7Null pointer dereference in PaddlePaddle
Null pointer dereference in PaddlePaddle
CVE-2023-38671High· 8.3Heap buffer overflow in PaddlePaddle
Heap buffer overflow in PaddlePaddle
CVE-2023-38672Medium· 4.7Float point exception (FPE) in paddlepaddle
Float point exception (FPE) in paddlepaddle
CVE-2023-38673Critical· 9.6Command injection in PaddlePaddle
Command injection in PaddlePaddle
CVE-2023-38669High· 8.3Use after free in PaddlePaddle
Use after free in PaddlePaddle
CVE-2022-46742Critical· 9.8PaddlePaddle vulnerable to Code Injection
PaddlePaddle vulnerable to Code Injection