Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

PaddlePaddle — Vulnerabilities & Security Advisories 25

All 25 CVE vulnerabilities found in PaddlePaddle, with AI-generated Chinese analysis, references, and POCs.

This page aggregates security vulnerabilities for the PaddlePaddle machine learning framework, categorized by weakness type and affected component. It collects disclosures of software defects, including memory errors, logic bugs, and dependency issues, covering advisories published in recent years. Readers can use this resource to track the vendor’s security bulletins, understand specific classes of weaknesses within the PaddlePaddle ecosystem, and review the historical vulnerability landscape of the product without being overwhelmed by individual CVE identifiers. The collection is organized to facilitate trend analysis and risk assessment, helping developers and security teams identify recurring defect patterns and prioritize remediation efforts based on the severity and impact of reported issues.

Vendor: PaddlePaddle

CVE ID Title CVSS Severity Published
CVE-2023-52314 Command injection in convert_shape_compare CWE-78 9.6 Critical 2024-01-03
CVE-2023-52313 FPE in paddle.argmin and paddle.argmax CWE-369 4.7 Medium 2024-01-03
CVE-2023-52312 Null pointer dereference in paddle.crop CWE-476 4.7 Medium 2024-01-03
CVE-2023-52311 Command injection in _wget_download CWE-78 9.6 Critical 2024-01-03
CVE-2023-52310 Command injection in get_online_pass_interval CWE-78 9.6 Critical 2024-01-03
CVE-2023-52309 Heap buffer overflow in paddle.repeat_interleave CWE-120 8.2 High 2024-01-03
CVE-2023-52308 FPE in paddle.amin CWE-369 4.7 Medium 2024-01-03
CVE-2023-52307 Stack overflow in paddle.linalg.lu_unpack CWE-120 8.2 High 2024-01-03
CVE-2023-52306 FPE in paddle.lerp CWE-369 4.7 Medium 2024-01-03
CVE-2023-52305 FPE in paddle.topk CWE-369 4.7 Medium 2024-01-03
CVE-2023-52304 Stack overflow in paddle.searchsorted CWE-120 8.2 High 2024-01-03
CVE-2023-52303 Segfault in paddle.put_along_axis CWE-476 4.7 Medium 2024-01-03
CVE-2023-52302 Segfault in paddle.nextafter CWE-476 4.7 Medium 2024-01-03
CVE-2023-38678 Segfault in paddle.mode CWE-125 4.7 Medium 2024-01-03
CVE-2023-38677 FPE in paddle.linalg.eig CWE-369 4.7 Medium 2024-01-03
CVE-2023-38676 Segfault in paddle.dot CWE-476 4.7 Medium 2024-01-03
CVE-2023-38675 FPE in paddle.linalg.matrix_rank CWE-369 4.7 Medium 2024-01-03
CVE-2023-38674 FPE in paddle.nanmedian CWE-369 4.7 Medium 2024-01-03
CVE-2023-38673 Command injection in fs.py CWE-78 9.6 Critical 2023-07-26
CVE-2023-38672 FPE in paddle.linalg.matrix_power CWE-369 4.7 Medium 2023-07-26
CVE-2023-38671 Heap buffer overflow in paddle.trace CWE-120 8.3 High 2023-07-26
CVE-2023-38670 Null pointer dereference in paddle.flip CWE-476 4.7 Medium 2023-07-26
CVE-2023-38669 PaddlePaddle 资源管理错误漏洞 CWE-416 8.3 High 2023-07-26
CVE-2022-46742 PaddlePaddle 代码注入漏洞 CWE-94 10.0 Critical 2022-12-07
CVE-2022-46741 PaddlePaddle 缓冲区错误漏洞 CWE-125 7.1 High 2022-12-07

All 25 known CVE vulnerabilities affecting PaddlePaddle with full Chinese analysis, references, and POCs where available.