7.5

CVE-2021-33647

When performing the inference shape operation of the Tile operator, if the input data type is not int or int32, it will access data outside of bounds of heap allocated buffers.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Mindspore ≫ Mindspore SwPlatformopeneuler Version >= 1.0.0 < 1.3.0
Mindspore ≫ Mindspore Version0.7.0 Updatebeta SwPlatformopeneuler
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.85% 0.535
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:P/I:N/A:N
CWE-787 Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

https://gitee.com/mindspore/community/blob/master/security/security_advisory_list/mssa-2021-008_en.md
Patch
Third Party Advisory