CVE-2023-52302: Segfault in paddle.nextafter
Published Jan 3, 2024
·Updated
Nullptr in paddle.nextafter in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash and a denial of service.
Affected Software
2 affected componentsFixes available
pip/PaddlePaddle<2.6.0
2.6.0
PaddlePaddle paddlepaddle<2.6.0
Remediation
Event History
Jan 3, 2024
CVE Published
08:12 AM
Data Sourced
08:12 AM
DescriptionSeverityWeakness
Advisory Published
09:30 AM
Frequently Asked Questions
1
What is the severity of CVE-2023-52302?
CVE-2023-52302 has the potential to cause a runtime crash and denial of service.
2
How do I fix CVE-2023-52302?
To mitigate CVE-2023-52302, you should upgrade PaddlePaddle to version 2.6.0 or later.
3
Which versions of PaddlePaddle are affected by CVE-2023-52302?
PaddlePaddle versions prior to 2.6.0 are affected by CVE-2023-52302.
4
What components are impacted by CVE-2023-52302?
CVE-2023-52302 affects all components of PaddlePaddle versions below 2.6.0.
5
Can CVE-2023-52302 lead to data loss?
While CVE-2023-52302 primarily causes crashes, it may indirectly lead to data loss during a denial of service.