Browse CVEs

MEDIUM 6.5 CVE-2023-2970 A vulnerability classified as problematic was found in MindSpore 2.0.0-alpha/2.0.0-rc1. This vulnerability affects the function JsonHelper::UpdateArr… Mindspore Mitigation only Fix from $1,6002023-05-30 HIGH 7.5 CVE-2021-33654 When performing the initialization operation of the Split operator, if a dimension in the input shape is 0, it will cause a division by 0 exception. Mindspore 1.3.0+ Fix from $1,9502022-06-27 HIGH 7.5 CVE-2021-33647 When performing the inference shape operation of the Tile operator, if the input data type is not int or int32, it will access data outside of bounds… Mindspore 1.3.0+ Fix from $1,9502022-06-27 HIGH 7.5 CVE-2021-33648 When performing the inference shape operation of Affine, Concat, MatMul, ArgMinMax, EmbeddingLookup, and Gather operators, if the input shape size is… Mindspore 1.3.0+ Fix from $1,9502022-06-27 HIGH 7.5 CVE-2021-33649 When performing the inference shape operation of the Transpose operator, if the value in the perm element is greater than or equal to the size of the… Mindspore 1.3.0+ Fix from $1,9502022-06-27 HIGH 7.5 CVE-2021-33650 When performing the inference shape operation of the SparseToDense operator, if the number of inputs is less than three, it will access data outside … Mindspore 1.3.0+ Fix from $1,9502022-06-27 HIGH 7.5 CVE-2021-33651 When performing the analytical operation of the DepthwiseConv2D operator, if the attribute depth_multiplier is 0, it will cause a division by 0 excep… Mindspore 1.3.0+ Fix from $1,9502022-06-27 HIGH 7.5 CVE-2021-33652 When the Reduce operator run operation is executed, if there is a value of 0 in the parameter axis_sizes element, it will cause a division by 0 excep… Mindspore 1.3.0+ Fix from $1,9502022-06-27 HIGH 7.5 CVE-2021-33653 When performing the derivation shape operation of the SpaceToBatch operator, if there is a value of 0 in the parameter block_shape element, it will c… Mindspore 1.3.0+ Fix from $1,9502022-06-27