CVE-2021-33648

Published: Jun 27, 2022Modified: Jun 17, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

When performing the inference shape operation of Affine, Concat, MatMul, ArgMinMax, EmbeddingLookup, and Gather operators, if the input shape size is 0, it will access data outside of bounds of shape which allocated from heap buffers.

Affected (1)

Products: Mindspore: Mindspore

Mindspore

1 product

Mindspore

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Mindspore Mindspore	From 1.1.0 to 1.3.0

Related CWEs

CWE-125

Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

References (2)

https://gitee.com/mindspore/community/blob/master/security/security_advisory_list/mssa-2021-007_en.md

Source: securities@openeuler.org

PatchThird Party Advisory

https://gitee.com/mindspore/community/blob/master/security/security_advisory_list/mssa-2021-007_en.md

Source: af854a3a-2127-422b-91ae-364da2661108

PatchThird Party Advisory

Timeline

No history available yet.