CVE-2023-52309: Heap buffer overflow in paddle.repeat_interleave
Published Jan 3, 2024
·Updated
Heap buffer overflow in paddle.repeatinterleave in PaddlePaddle before 2.6.0. This flaw can lead to a denial of service, information disclosure, or more damage is possible.
Affected Software
2 affected componentsFixes available
pip/PaddlePaddle<2.6.0
2.6.0
PaddlePaddle paddlepaddle<2.6.0
Remediation
Event History
Jan 3, 2024
CVE Published
via MITRE·08:14 AM
Data Sourced
via MITRE·08:14 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·09:15 AM
RemedyDescriptionSeverityWeaknessAffected Software
Advisory Published
via GitHub·09:30 AM
Frequently Asked Questions
1
What is the severity of CVE-2023-52309?
CVE-2023-52309 has a high severity due to its potential for denial of service and information disclosure.
2
How do I fix CVE-2023-52309?
To fix CVE-2023-52309, upgrade PaddlePaddle to version 2.6.0 or later.
3
What is the impact of CVE-2023-52309?
The impact of CVE-2023-52309 includes possible denial of service and information leakage.
4
Which versions of PaddlePaddle are affected by CVE-2023-52309?
PaddlePaddle versions before 2.6.0 are affected by CVE-2023-52309.
5
Is there a workaround for CVE-2023-52309 until a patch is applied?
There are no acknowledged workarounds for CVE-2023-52309, and upgrading to a patched version is recommended.