CVE-2023-52312: Null pointer dereference in paddle.crop
Published Jan 3, 2024
·Updated
Nullptr dereference in paddle.crop in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash and a denial of service.
Affected Software
2 affected componentsFixes available
pip/PaddlePaddle<2.6.0
2.6.0
PaddlePaddle paddlepaddle<=2.6.0
Remediation
Event History
Jan 3, 2024
CVE Published
08:15 AM
Data Sourced
08:15 AM
DescriptionSeverityWeakness
Advisory Published
09:30 AM
Frequently Asked Questions
1
What is the severity of CVE-2023-52312?
The severity of CVE-2023-52312 is categorized as high due to its potential to cause runtime crashes and denial of service.
2
How do I fix CVE-2023-52312?
To fix CVE-2023-52312, upgrade PaddlePaddle to version 2.6.0 or later.
3
What causes the vulnerability CVE-2023-52312?
CVE-2023-52312 is caused by a nullptr dereference in the paddle.crop function.
4
In which versions of PaddlePaddle is CVE-2023-52312 present?
CVE-2023-52312 affects PaddlePaddle versions prior to 2.6.0.
5
What are the consequences of CVE-2023-52312?
The consequences of CVE-2023-52312 include the possibility of runtime crashes and denial of service.