Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
MindSpore json_helper.cc UpdateArray memory corruption
Vulnerability Description
A vulnerability classified as problematic was found in MindSpore 2.0.0-alpha/2.0.0-rc1. This vulnerability affects the function JsonHelper::UpdateArray of the file mindspore/ccsrc/minddata/dataset/util/json_helper.cc. The manipulation leads to memory corruption. The name of the patch is 30f4729ea2c01e1ed437ba92a81e2fc098d608a9. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-230176.
CVSS Information
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
Vulnerability Type
内存缓冲区边界内操作的限制不恰当
Vulnerability Title
MindSpore 缓冲区错误漏洞
Vulnerability Description
MindSpore是MindSpore开源的一个新的开源深度学习训练/推理框架。可用于移动、边缘和云场景。 MindSpore 2.0.0-alpha版本、2.0.0-rc1版本存在缓冲区错误漏洞。攻击者利用该漏洞导致内存损坏。
CVSS Information
N/A
Vulnerability Type
N/A