Filtered by vendor Paddlepaddle Subscriptions
Filtered by product Paddle Subscriptions
Total 3 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2026-108961 1 Paddlepaddle 2 Paddle, Paddlex 2026-10-13 6.3 Medium
A flaw has been found in PaddlePaddle PaddleX up to 3.7.2. Affected by this vulnerability is the function NormalizeImage.__init__ of the file paddlex/inference/models/text_detection/processors.py of the component Preprocessor. This manipulation of the argument scale causes code injection. It is possible to initiate the attack remotely. The pull request to fix this issue awaits acceptance.
CVE-2024-0521 1 Paddlepaddle 1 Paddle 2025-05-30 7.8 High
Code Injection in paddlepaddle/paddle
CVE-2024-1603 1 Paddlepaddle 2 Paddle, Paddlepaddle 2025-02-13 7.5 High
paddlepaddle/paddle 2.6.0 allows arbitrary file read via paddle.vision.ops.read_file.