PaddlePaddle heap buffer overflow in paddle.repeat_interleave

CRITICAL 9.8CVE-2023-52309 · GHSA-8fp7-jwv2-49x9 · PYSEC-2024-141 · Published 03/01/2024 · updated 17/06/2026

In short

CVE-2023-52309 is a CRITICAL (CVSS 9.8) vulnerability affecting paddlepaddle, paddlepaddle (paddlepaddle).
Chance of exploitation in the next 30 days (EPSS): 0.54%, higher than 45.6% of all vulnerabilities.
Fix: update to 2.6.0 or later.

Package	Affected versions	Patched versions
paddlepaddle PyPI	`< 2.6.0`	`2.6.0`
paddlepaddle paddlepaddle	`< 2.6.0`	`2.6.0`

Description

Heap buffer overflow in paddle.repeat_interleave in PaddlePaddle before 2.6.0. This flaw can lead to a denial of service, information disclosure, or more damage is possible.

NVD description

Heap buffer overflow in paddle.repeat_interleave in PaddlePaddle before 2.6.0. This flaw can lead to a denial of service, information disclosure, or more damage is possible.

References

nvd.nist.gov/vuln/detail/CVE-2023-52309 · ADVISORY
PaddlePaddle/Paddle commit 19da5c0 · WEB
PaddlePaddle/Paddle · PACKAGE
PaddlePaddle/Paddle · WEB
pypa/advisory-database · WEB
GitHub Advisory GHSA-8fp7-jwv2-49x9 · ADVISORY

More vulnerabilities in paddlepaddle

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

paddlepaddle

PyPI

< 2.6.0

2.6.0

paddlepaddle

< 2.6.0

2.6.0

Description

Heap buffer overflow in paddle.repeat_interleave in PaddlePaddle before 2.6.0. This flaw can lead to a denial of service, information disclosure, or more damage is possible.

NVD description

Heap buffer overflow in paddle.repeat_interleave in PaddlePaddle before 2.6.0. This flaw can lead to a denial of service, information disclosure, or more damage is possible.

More vulnerabilities in paddlepaddle

See all →