Vulnerabilities > CVE-2021-33647 - Out-of-bounds Write vulnerability in Mindspore

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
HIGH
Integrity impact
NONE
Availability impact
NONE
network
low complexity
mindspore
CWE-787

Summary

When performing the inference shape operation of the Tile operator, if the input data type is not int or int32, it will access data outside of bounds of heap allocated buffers.

Common Weakness Enumeration (CWE)