PaddlePaddle vulnerabilities

CVEs per yearBy the year they were published

1. 20222
2. 20246
3. 202423
4. 20262

Newest CVEs

• CVE-2026-108961

  PaddlePaddle PaddleX Preprocessor processors.py NormalizeImage.__init__ code injection

  PaddlePaddle · PaddleX

  Medium5.3
• CVE-2026-10800

  PaddlePaddle FastDeploy MultimodalHasher hasher.py hash_features weak hash

  PaddlePaddle · FastDeploy

  Low2.0
• CVE-2024-1603

  confirmed

  paddlepaddle · paddlepaddle/paddle

  High8.2
• CVE-2024-0818

  Arbitrary File Overwrite Via Path Traversal in paddlepaddle/paddle before 2.6

  paddlepaddle · paddlepaddle/paddle

  Critical9.1
• CVE-2024-0917

  remote code execution in paddlepaddle/paddle 2.6.0

  paddlepaddle · paddlepaddle/paddle

  Critical9.4
• CVE-2024-0815

  Command injection in paddle.utils.download._wget_download (bypass filter) in paddlepaddle/paddle 2.6.0

  paddlepaddle · paddlepaddle/paddle

  Critical9.3
• CVE-2024-0817

  Command injection in IrGraph.draw in paddlepaddle/paddle 2.6.0

  paddlepaddle · paddlepaddle/paddle

  Critical9.3
• CVE-2024-0521

  Code Injection in paddlepaddle/paddle

  paddlepaddle · paddlepaddle/paddle

  Critical9.3
• CVE-2023-52314

  Command injection in convert_shape_compare

  PaddlePaddle · PaddlePaddle

  Critical9.6
• CVE-2023-52313

  FPE in paddle.argmin and paddle.argmax

  PaddlePaddle · PaddlePaddle

  Medium4.7