CVE-2023-38670

MediumCVSS 4.7

Published: 26/07/2023(UTC)Updated: 17/06/2026(UTC)Translated: 19/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.56%

42th percentile - higher than 42% of all known CVEs

A null pointer dereference in paddle.flip in PaddlePaddle before version 2.5.0 results in a runtime crash and denial of service.

Organizations may experience application downtime when using PaddlePaddle, impacting service availability.

It is recommended to upgrade PaddlePaddle to version 2.5.0 or later to mitigate this vulnerability.

Original NVD description (English source)

Null pointer dereference in paddle.flip in PaddlePaddle before 2.5.0. This resulted in a runtime crash and denial of service.