CVE-2022-46742

Summary

Code injection in paddle.audio.functional.get_window in PaddlePaddle 2.4.0-rc0 allows arbitrary code execution.

Affected Software

Weaknesses

• CWE-94: CWE-94 Improper Control of Generation of Code ('Code Injection')

ADP Enrichment

CVE Program Container

Additional References

• https://github.com/PaddlePaddle/Paddle/blob/develop/security/advisory/pdsa-2022-002.md

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: yes
  • Technical Impact: total

References

• https://github.com/PaddlePaddle/Paddle/blob/develop/security/advisory/pdsa-2022-002.md

• ←Previous
• Next→