cvedb.io
CVE-2021-33648
HIGH · CVSS 7.5
EPSS exploitation probability: 0%
Published 2022-06-27T17:15:08.670 · Last modified 2026-06-17T03:54:57.620

Summary

When performing the inference shape operation of Affine, Concat, MatMul, ArgMinMax, EmbeddingLookup, and Gather operators, if the input shape size is 0, it will access data outside of bounds of shape which allocated from heap buffers.

Affected products

mindspore — mindspore

Does this affect you?

Add your gear to cvedb and we'll alert you only when mindspore ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.