CVE-2023-38672

MediumCVSS 4.7

Published: 26/07/2023(UTC)Updated: 17/06/2026(UTC)Translated: 19/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.64%

46th percentile - higher than 46% of all known CVEs

There is an FPE vulnerability in paddle.trace in PaddlePaddle before version 2.5.0, which can lead to runtime crashes and denial of service.

This vulnerability can cause application downtime, affecting the availability of services within the organization.

It is recommended to upgrade PaddlePaddle to version 2.5.0 or later to mitigate this vulnerability.

Original NVD description (English source)

FPE in paddle.trace in PaddlePaddle before 2.5.0. This flaw can cause a runtime crash and a denial of service.