CVE-2023-52312
Assigner: Baidu
Published: 2024-01-03T08:15:13.401Z
State: PUBLISHED
affected: defaultStatus: unaffected
product: PaddlePaddle
vendor: PaddlePaddle
versions: lessThan: 2.6.0
status: affected
version: 0
versionType: git
descriptions: supportingMedia: base64: no
type: text/html
value: <div><div>Nullptr dereference in <span style="background-color: rgb(255, 255, 255);">paddle.crop</span>&nbsp;in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash and a denial of service.</div></div>
value: Nullptr dereference in paddle.crop in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash and a denial of service.




metrics: cvssV3_1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: LOW
baseScore: 4.7
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: NONE
scope: CHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:N/A:L
version: 3.1
format: CVSS
scenarios: value: GENERAL
problemTypes: descriptions: cweId: CWE-476
description: CWE-476 NULL Pointer Dereference
type: CWE
source: discovery: UNKNOWN
title: Null pointer dereference in paddle.crop
x_generator: engine: Vulnogram 0.1.0-dev