Skip to content

CVE PROGRAM SOURCE RECORD10.0 Critical

CVE-2022-46742

Code injection in paddle.audio.functional.get_window in PaddlePaddle 2.4.0-rc0 allows arbitrary code execution.

Read JSON ↗CVE.org ↗

Status: Published
Published: 2022-12-07
Updated: 2025-04-22
Assigning organization: Baidu

Description

Code injection in paddle.audio.functional.get_window in PaddlePaddle 2.4.0-rc0 allows arbitrary code execution.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

PaddlePaddle PaddlePaddle

Default version status: unaffected

2.4.0-rc0affected

References

https://github.com/PaddlePaddle/Paddle/blob/develop/security/advisory/pdsa-2022-002.md ↗