PaddlePaddle

Products

ProductCVEsExploitedLatest
PaddlePaddle25–Jan 3, 2024
paddlepaddle/paddle6–Mar 23, 2024
FastDeploy1–Jun 4, 2026
PaddleX1–Oct 13, 2026

Exploited and recent CVEs

  • CVE-2026-108961 Medium 6.3 PaddlePaddle PaddleX Preprocessor processors.py NormalizeImage.__init__ code injection 0.2%
  • CVE-2026-10800 Low 3.6 PaddlePaddle FastDeploy MultimodalHasher hasher.py hash_features weak hash <0.1%
  • CVE-2024-1603 High 8.2 confirmed 0.6%
  • CVE-2024-0818 Critical 9.1 Arbitrary File Overwrite Via Path Traversal in paddlepaddle/paddle before 2.6 1.1%
  • CVE-2024-0917 Critical 9.4 remote code execution in paddlepaddle/paddle 2.6.0 1.7%
  • CVE-2024-0815 Critical 9.3 Command injection in paddle.utils.download._wget_download (bypass filter) in paddlepaddle/paddle 2.6.0 1.1%
  • CVE-2024-0817 Critical 9.3 Command injection in IrGraph.draw in paddlepaddle/paddle 2.6.0 1.2%
  • CVE-2024-0521 Critical 9.3 Code Injection in paddlepaddle/paddle 0.5%
  • CVE-2023-52314 Critical 9.6 Command injection in convert_shape_compare 1.2%
  • CVE-2023-52313 Medium 4.7 FPE in paddle.argmin and paddle.argmax 0.5%
  • CVE-2023-52312 Medium 4.7 Null pointer dereference in paddle.crop 0.5%
  • CVE-2023-52311 Critical 9.6 Command injection in _wget_download 1.2%
  • CVE-2023-52310 Critical 9.6 Command injection in get_online_pass_interval 1.2%
  • CVE-2023-52309 High 8.2 Heap buffer overflow in paddle.repeat_interleave 0.5%
  • CVE-2023-52308 Medium 4.7 FPE in paddle.amin 0.5%
  • CVE-2023-52307 High 8.2 Stack overflow in paddle.linalg.lu_unpack 0.5%
  • CVE-2023-52306 Medium 4.7 FPE in paddle.lerp 0.5%
  • CVE-2023-52305 Medium 4.7 FPE in paddle.topk 0.5%
  • CVE-2023-52304 High 8.2 Stack overflow in paddle.searchsorted 0.6%
  • CVE-2023-52303 Medium 4.7 Segfault in paddle.put_along_axis 0.5%
  • CVE-2023-52302 Medium 4.7 Segfault in paddle.nextafter 0.5%
  • CVE-2023-38678 Medium 4.7 Segfault in paddle.mode 0.5%
  • CVE-2023-38677 Medium 4.7 FPE in paddle.linalg.eig 0.5%
  • CVE-2023-38676 Medium 4.7 Segfault in paddle.dot 0.5%
  • CVE-2023-38675 Medium 4.7 FPE in paddle.linalg.matrix_rank 0.5%
  • CVE-2023-38674 Medium 4.7 FPE in paddle.nanmedian 0.5%
  • CVE-2023-38673 Critical 9.6 Command injection in fs.py 2.3%
  • CVE-2023-38672 Medium 4.7 FPE in paddle.linalg.matrix_power 0.7%
  • CVE-2023-38671 High 8.3 Heap buffer overflow in paddle.trace 0.8%
  • CVE-2023-38670 Medium 4.7 Null pointer dereference in paddle.flip 0.7%