Vulnerability Description
When performing the inference shape operation of the Tile operator, if the input data type is not int or int32, it will access data outside of bounds of heap allocated buffers.
CVSS Score
7.5
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Mindspore | Mindspore | >= 1.0.0, < 1.3.0 |
Related Weaknesses (CWE)
References
- https://gitee.com/mindspore/community/blob/master/security/security_advisory_lisPatchThird Party Advisory
- https://gitee.com/mindspore/community/blob/master/security/security_advisory_lisPatchThird Party Advisory
FAQ
What is CVE-2021-33647?
CVE-2021-33647 is a vulnerability with a CVSS score of 7.5 (HIGH). When performing the inference shape operation of the Tile operator, if the input data type is not int or int32, it will access data outside of bounds of heap allocated buffers.
How severe is CVE-2021-33647?
CVE-2021-33647 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2021-33647?
Check the references section above for vendor advisories and patch information. Affected products include: Mindspore Mindspore.