https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-1603.htmlhttps://patchthecve.com/cve/CVE-2024-1603.htmlWed, 17 Jun 2026 07:04:37 +0000HIGH 7.5: paddlepaddle/paddle 2.6.0 allows arbitrary file read via paddle.vision.ops.read_file.https://patchthecve.com/cve/CVE-2024-0818.htmlhttps://patchthecve.com/cve/CVE-2024-0818.htmlWed, 17 Jun 2026 06:54:22 +0000CRITICAL 9.1: Arbitrary File Overwrite Via Path Traversal in paddlepaddle/paddle before 2.6https://patchthecve.com/cve/CVE-2024-0917.htmlhttps://patchthecve.com/cve/CVE-2024-0917.htmlWed, 17 Jun 2026 06:54:33 +0000CRITICAL 9.8: remote code execution in paddlepaddle/paddle 2.6.0https://patchthecve.com/cve/CVE-2024-0815.htmlhttps://patchthecve.com/cve/CVE-2024-0815.htmlWed, 17 Jun 2026 06:54:21 +0000HIGH 8.8: Command injection in paddle.utils.download._wget_download (bypass filter) in paddlepaddle/paddle 2.6.0https://patchthecve.com/cve/CVE-2024-0817.htmlhttps://patchthecve.com/cve/CVE-2024-0817.htmlWed, 17 Jun 2026 06:54:22 +0000HIGH 7.8: Command injection in IrGraph.draw in paddlepaddle/paddle 2.6.0https://patchthecve.com/cve/CVE-2023-52314.htmlhttps://patchthecve.com/cve/CVE-2023-52314.htmlWed, 17 Jun 2026 06:42:27 +0000CRITICAL 9.6: PaddlePaddle before 2.6.0 has a command injection in convert_shape_compare. This resulted in the ability to execute arbitrary commands on the operating system. https://patchthecve.com/cve/CVE-2023-52313.htmlhttps://patchthecve.com/cve/CVE-2023-52313.htmlWed, 17 Jun 2026 06:42:27 +0000MEDIUM 4.7: FPE in paddle.argmin and paddle.argmax in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash and a denial of service. https://patchthecve.com/cve/CVE-2023-52312.htmlhttps://patchthecve.com/cve/CVE-2023-52312.htmlWed, 17 Jun 2026 06:42:27 +0000MEDIUM 4.7: Nullptr dereference in paddle.crop in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash and a denial of service. https://patchthecve.com/cve/CVE-2023-52311.htmlhttps://patchthecve.com/cve/CVE-2023-52311.htmlWed, 17 Jun 2026 06:42:27 +0000CRITICAL 9.6: PaddlePaddle before 2.6.0 has a command injection in _wget_download. This resulted in the ability to execute arbitrary commands on the operating system. https://patchthecve.com/cve/CVE-2023-52310.htmlhttps://patchthecve.com/cve/CVE-2023-52310.htmlWed, 17 Jun 2026 06:42:27 +0000CRITICAL 9.6: PaddlePaddle before 2.6.0 has a command injection in get_online_pass_interval. This resulted in the ability to execute arbitrary commands on the operating system. https://patchthecve.com/cve/CVE-2023-52309.htmlhttps://patchthecve.com/cve/CVE-2023-52309.htmlWed, 17 Jun 2026 06:42:26 +0000HIGH 8.2: Heap buffer overflow in paddle.repeat_interleave in PaddlePaddle before 2.6.0. This flaw can lead to a denial of service, information disclosure, or more damage is possible. https://patchthecve.com/cve/CVE-2023-52308.htmlhttps://patchthecve.com/cve/CVE-2023-52308.htmlWed, 17 Jun 2026 06:42:26 +0000MEDIUM 4.7: FPE in paddle.amin in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash and a denial of service. https://patchthecve.com/cve/CVE-2023-52307.htmlhttps://patchthecve.com/cve/CVE-2023-52307.htmlWed, 17 Jun 2026 06:42:26 +0000HIGH 8.2: Stack overflow in paddle.linalg.lu_unpack in PaddlePaddle before 2.6.0. This flaw can lead to a denial of service, or even more damage. https://patchthecve.com/cve/CVE-2023-52306.htmlhttps://patchthecve.com/cve/CVE-2023-52306.htmlWed, 17 Jun 2026 06:42:26 +0000MEDIUM 4.7: FPE in paddle.lerp in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash and a denial of service. https://patchthecve.com/cve/CVE-2023-52305.htmlhttps://patchthecve.com/cve/CVE-2023-52305.htmlWed, 17 Jun 2026 06:42:26 +0000MEDIUM 4.7: FPE in paddle.topk in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash and a denial of service. https://patchthecve.com/cve/CVE-2023-52304.htmlhttps://patchthecve.com/cve/CVE-2023-52304.htmlWed, 17 Jun 2026 06:42:26 +0000HIGH 8.2: Stack overflow in paddle.searchsorted in PaddlePaddle before 2.6.0. This flaw can lead to a denial of service, or even more damage. https://patchthecve.com/cve/CVE-2023-52303.htmlhttps://patchthecve.com/cve/CVE-2023-52303.htmlWed, 17 Jun 2026 06:42:26 +0000MEDIUM 4.7: Nullptr in paddle.put_along_axis in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash and a denial of service. https://patchthecve.com/cve/CVE-2023-52302.htmlhttps://patchthecve.com/cve/CVE-2023-52302.htmlWed, 17 Jun 2026 06:42:26 +0000MEDIUM 4.7: Nullptr in paddle.nextafter in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash and a denial of service. https://patchthecve.com/cve/CVE-2023-38678.htmlhttps://patchthecve.com/cve/CVE-2023-38678.htmlWed, 17 Jun 2026 06:10:56 +0000MEDIUM 4.7: OOB access in paddle.mode in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash and a denial of service. https://patchthecve.com/cve/CVE-2023-38677.htmlhttps://patchthecve.com/cve/CVE-2023-38677.htmlWed, 17 Jun 2026 06:10:55 +0000MEDIUM 4.7: FPE in paddle.linalg.eig in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash and a denial of service. https://patchthecve.com/cve/CVE-2023-38676.htmlhttps://patchthecve.com/cve/CVE-2023-38676.htmlWed, 17 Jun 2026 06:10:55 +0000MEDIUM 4.7: Nullptr in paddle.dot in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash and a denial of service. https://patchthecve.com/cve/CVE-2023-38675.htmlhttps://patchthecve.com/cve/CVE-2023-38675.htmlWed, 17 Jun 2026 06:10:55 +0000MEDIUM 4.7: FPE in paddle.linalg.matrix_rank in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash and a denial of service. https://patchthecve.com/cve/CVE-2023-38674.htmlhttps://patchthecve.com/cve/CVE-2023-38674.htmlWed, 17 Jun 2026 06:10:55 +0000MEDIUM 4.7: FPE in paddle.nanmedian in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash and a denial of service. https://patchthecve.com/cve/CVE-2023-38673.htmlhttps://patchthecve.com/cve/CVE-2023-38673.htmlWed, 17 Jun 2026 06:10:55 +0000CRITICAL 9.6: PaddlePaddle before 2.5.0 has a command injection in fs.py. This resulted in the ability to execute arbitrary commands on the operating system. https://patchthecve.com/cve/CVE-2023-38672.htmlhttps://patchthecve.com/cve/CVE-2023-38672.htmlWed, 17 Jun 2026 06:10:55 +0000MEDIUM 4.7: FPE in paddle.trace in PaddlePaddle before 2.5.0. This flaw can cause a runtime crash and a denial of service. https://patchthecve.com/cve/CVE-2023-38671.htmlhttps://patchthecve.com/cve/CVE-2023-38671.htmlWed, 17 Jun 2026 06:10:55 +0000HIGH 8.3: Heap buffer overflow in paddle.trace in PaddlePaddle before 2.5.0. This flaw can lead to a denial of service, information disclosure, or more damage is possible. https://patchthecve.com/cve/CVE-2023-38670.htmlhttps://patchthecve.com/cve/CVE-2023-38670.htmlWed, 17 Jun 2026 06:10:55 +0000MEDIUM 4.7: Null pointer dereference in paddle.flip in PaddlePaddle before 2.5.0. This resulted in a runtime crash and denial of service. https://patchthecve.com/cve/CVE-2023-38669.htmlhttps://patchthecve.com/cve/CVE-2023-38669.htmlWed, 17 Jun 2026 06:10:54 +0000HIGH 8.3: Use after free in paddle.diagonal in PaddlePaddle before 2.5.0. This resulted in a potentially exploitable condition.