Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

PaddlePaddle — Vulnerabilities & Security Advisories 25

All 25 CVE vulnerabilities found in PaddlePaddle, with AI-generated Chinese analysis, references, and POCs.

This page documents known vulnerabilities associated with PaddlePaddle, an open-source deep learning platform developed by Baidu, focusing on common weakness types tracked by vulnerability aggregators. It collects a comprehensive list of security issues affecting the PaddlePaddle software ecosystem, covering data from its initial public releases through the most recent patches and advisories issued by the vendor or independent researchers. By utilizing this resource, you can efficiently track official vendor advisories to stay informed about critical updates, gain a deeper understanding of specific weakness classes such as buffer overflows or injection flaws within the framework’s codebase, and review the complete vulnerability history of the product to assess long-term security posture and remediation trends. The aggregated data serves as a reference for developers, security analysts, and system administrators who need to evaluate risks, prioritize patches, and implement defensive measures across environments running PaddlePaddle versions. This neutral overview facilitates informed decision-making without promoting any specific tool or service, relying solely on publicly available vulnerability data and structured categorization standards.

Vendor: PaddlePaddle

CVE ID Title CVSS Severity Published
CVE-2023-52314 Command injection in convert_shape_compare CWE-78 9.6 Critical 2024-01-03
CVE-2023-52313 FPE in paddle.argmin and paddle.argmax CWE-369 4.7 Medium 2024-01-03
CVE-2023-52312 Null pointer dereference in paddle.crop CWE-476 4.7 Medium 2024-01-03
CVE-2023-52311 Command injection in _wget_download CWE-78 9.6 Critical 2024-01-03
CVE-2023-52310 Command injection in get_online_pass_interval CWE-78 9.6 Critical 2024-01-03
CVE-2023-52309 Heap buffer overflow in paddle.repeat_interleave CWE-120 8.2 High 2024-01-03
CVE-2023-52308 FPE in paddle.amin CWE-369 4.7 Medium 2024-01-03
CVE-2023-52307 Stack overflow in paddle.linalg.lu_unpack CWE-120 8.2 High 2024-01-03
CVE-2023-52306 FPE in paddle.lerp CWE-369 4.7 Medium 2024-01-03
CVE-2023-52305 FPE in paddle.topk CWE-369 4.7 Medium 2024-01-03
CVE-2023-52304 Stack overflow in paddle.searchsorted CWE-120 8.2 High 2024-01-03
CVE-2023-52303 Segfault in paddle.put_along_axis CWE-476 4.7 Medium 2024-01-03
CVE-2023-52302 Segfault in paddle.nextafter CWE-476 4.7 Medium 2024-01-03
CVE-2023-38678 Segfault in paddle.mode CWE-125 4.7 Medium 2024-01-03
CVE-2023-38677 FPE in paddle.linalg.eig CWE-369 4.7 Medium 2024-01-03
CVE-2023-38676 Segfault in paddle.dot CWE-476 4.7 Medium 2024-01-03
CVE-2023-38675 FPE in paddle.linalg.matrix_rank CWE-369 4.7 Medium 2024-01-03
CVE-2023-38674 FPE in paddle.nanmedian CWE-369 4.7 Medium 2024-01-03
CVE-2023-38673 Command injection in fs.py CWE-78 9.6 Critical 2023-07-26
CVE-2023-38672 FPE in paddle.linalg.matrix_power CWE-369 4.7 Medium 2023-07-26
CVE-2023-38671 Heap buffer overflow in paddle.trace CWE-120 8.3 High 2023-07-26
CVE-2023-38670 Null pointer dereference in paddle.flip CWE-476 4.7 Medium 2023-07-26
CVE-2023-38669 PaddlePaddle 资源管理错误漏洞 CWE-416 8.3 High 2023-07-26
CVE-2022-46742 PaddlePaddle 代码注入漏洞 CWE-94 10.0 Critical 2022-12-07
CVE-2022-46741 PaddlePaddle 缓冲区错误漏洞 CWE-125 7.1 High 2022-12-07

All 25 known CVE vulnerabilities affecting PaddlePaddle with full Chinese analysis, references, and POCs where available.