CVE-2023-38669: Use After Free
Published Jul 26, 2023
·Updated
Use after free in paddle.diagonal in PaddlePaddle before 2.5.0. This resulted in a potentially exploitable condition.
Affected Software
2 affected componentsFixes available
pip/paddlepaddle>=0<2.5.0
2.5.0
PaddlePaddle paddlepaddle<2.5.0
Remediation
Event History
Jul 26, 2023
CVE Published
via MITRE·09:29 AM
Data Sourced
via MITRE·09:29 AM
DescriptionSeverityWeakness
Advisory Published
12:30 PM
Frequently Asked Questions
1
What is the severity of CVE-2023-38669?
CVE-2023-38669 is classified as a potentially exploitable vulnerability due to a use after free condition in PaddlePaddle.
2
How do I fix CVE-2023-38669?
To mitigate CVE-2023-38669, upgrade PaddlePaddle to version 2.5.0 or later.
3
What versions of PaddlePaddle are affected by CVE-2023-38669?
CVE-2023-38669 affects all versions of PaddlePaddle prior to 2.5.0.
4
What components does CVE-2023-38669 impact within PaddlePaddle?
CVE-2023-38669 impacts the paddle.diagonal function within PaddlePaddle.
5
Is CVE-2023-38669 a critical vulnerability?
While CVE-2023-38669 is potentially exploitable, its criticality depends on the usage context and exposure.