Vulnerability Details CVE-2021-33648
When performing the inference shape operation of Affine, Concat, MatMul, ArgMinMax, EmbeddingLookup, and Gather operators, if the input shape size is 0, it will access data outside of bounds of shape which allocated from heap buffers.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 52.9%
CVSS Severity
CVSS v3 Score 7.5
CVSS v2 Score 5.0
References
Products affected by CVE-2021-33648
-
cpe:2.3:a:mindspore:mindspore:1.1.0
-
cpe:2.3:a:mindspore:mindspore:1.1.1
-
cpe:2.3:a:mindspore:mindspore:1.2.0
-
cpe:2.3:a:mindspore:mindspore:1.2.1