CVE-2025-3145 - MindSpore mindspore.numpy.fft.rfft2 memory corruption

Back Back to CVE browser

MEDIUM

MindSpore mindspore.numpy.fft.rfft2 memory corruption

Published Apr 3, 2025

4.8

MEDIUM

CVSS 4.0

EPSS 0.18%

Description

A vulnerability, which was classified as problematic, has been found in MindSpore 2.5.0. Affected by this issue is the function mindspore.numpy.fft.rfft2. The manipulation leads to memory corruption. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used.

Affected products

Vendor n/a Product MindSpore Default
n/a
- Version
  2.5.0
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

n/a

MindSpore

n/a

Version	Status	Constraints
2.5.0	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-119

Buffer Overflow

References (3)

https://gitee.com/mindspore/mindspore/issues/IBVKM8
exploitissue-tracking
https://vuldb.com/?ctiid.303050
signaturepermissions-required
https://vuldb.com/?id.303050
vdb-entrytechnical-description

Link	Providers	Tags
https://gitee.com/mindspore/mindspore/issues/IBVKM8		exploitissue-tracking
https://vuldb.com/?ctiid.303050		signaturepermissions-required
https://vuldb.com/?id.303050		vdb-entrytechnical-description

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner VulDB

Published Apr 3, 2025

Updated Apr 3, 2025

Reserved Apr 2, 2025

Link CVE-2025-3145

CISA Vulnrichment

Updated Apr 3, 2025

NVD

Status Deferred

Modified Jun 17, 2026

Link CVE-2025-3145

Red Hat

Severity n/a

Public date n/a

Links CVE-2025-3145