CVE-2022-46741: Critical severity paddlepaddle vulnerability
Published Dec 7, 2022
·Updated
Out-of-bounds read in gathertree in PaddlePaddle before 2.4.
Affected Software
1 affected component
PaddlePaddle paddlepaddle<2.4
Remediation
Event History
Dec 7, 2022
CVE Published
via MITRE·07:41 AM
Data Sourced
via MITRE·07:41 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·08:15 AM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2022-46741?
CVE-2022-46741 has a medium severity rating due to the potential for an out-of-bounds read.
2
How do I fix CVE-2022-46741?
To fix CVE-2022-46741, upgrade PaddlePaddle to version 2.4 or later.
3
What is the impact of CVE-2022-46741?
The impact of CVE-2022-46741 includes potential data leakage and application instability during operations.
4
Which versions of PaddlePaddle are affected by CVE-2022-46741?
PaddlePaddle versions prior to 2.4 are affected by CVE-2022-46741.
5
Is CVE-2022-46741 a local or remote vulnerability?
CVE-2022-46741 is considered a local vulnerability as it requires local access to exploit.