CVE-2023-38676CWE-476

Segfault in paddle.dot

Medium · published January 3, 2024

CVSS v3.1
4.7
EPSS
0%
Percentile
41.1
In the wild
Unconfirmed
What it is

Nullptr in paddle.dot in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash and a denial of service.

The record
Technical detail
CVSS v3.1
4.7 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.00488 · 41.1th percentile
Weakness
CWE-476 · NULL Pointer Dereference
Published
2024-01-03T08:11Z
EPSS history
Timeline
  • 03 JAN 08:11Z
    Segfault in paddle.dot
    cvelistv5