CVE-2021-33648

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

When performing the inference shape operation of Affine, Concat, MatMul, ArgMinMax, EmbeddingLookup, and Gather operators, if the input shape size is 0, it will access data outside of bounds of shape which allocated from heap buffers.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-125

Affected software

Vendor	Product	Versions
n/a	openEuler:mindspore	>= 1.1.0, < 1.3.0

References

https://gitee.com/mindspore/community/blob/master/security/security_advisory_list/mssa-2021-007_en.mdPatch, Third Party Advisory
https://gitee.com/mindspore/community/blob/master/security/security_advisory_list/mssa-2021-007_en.mdPatch, Third Party Advisory

Timeline

Published: Jun 27, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-336497.5When performing the inference shape operation of the Transpose operator, if the value in the perm element is greater than or equal to the si CVE-2021-336507.5When performing the inference shape operation of the SparseToDense operator, if the number of inputs is less than three, it will access data CVE-2021-336517.5When performing the analytical operation of the DepthwiseConv2D operator, if the attribute depth_multiplier is 0, it will cause a division b CVE-2021-336527.5When the Reduce operator run operation is executed, if there is a value of 0 in the parameter axis_sizes element, it will cause a division b CVE-2021-336537.5When performing the derivation shape operation of the SpaceToBatch operator, if there is a value of 0 in the parameter block_shape element, CVE-2021-336547.5When performing the initialization operation of the Split operator, if a dimension in the input shape is 0, it will cause a division by 0 ex CVE-2021-336556.7When sending malicous data to kernel by ioctl cmd FBIOPUT_VSCREENINFO,kernel will write memory out of bounds.CVE-2021-336566.8When setting font with malicous data by ioctl cmd PIO_FONT,kernel will write memory out of bounds.CVE-2021-336578.8There is a heap overflow problem in video/SDL_pixels.c in SDL (Simple DirectMedia Layer) 2.x to 2.0.18 versions. By crafting a malicious .BM CVE-2021-336587.8atune before 0.3-0.8 log in as a local user and run the curl command to access the local atune url interface to escalate the local privilege CVE-2021-336595.5SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated GIF file received from untrusted sources which results in cr CVE-2021-336605.5SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated FLI file received from untrusted sources which results in cr