PT-2025-14583 · Mindspore · Mindspore

Default436352 · Published 2025-04-03 · Updated 2025-04-03 · CVE-2025-3144

Positive Technologies (AI Summary)

CVSS v2.0

1.7

Low

Base vector

AV:L/AC:L/Au:S/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions MindSpore version 2.5.0

Description A vulnerability was found in MindSpore, affecting the function mindspore.numpy.fft.hfftn. The manipulation leads to memory corruption. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used.

Recommendations For MindSpore version 2.5.0, as a temporary workaround, consider disabling the mindspore.numpy.fft.hfftn function until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2025-3144

Affected Products

Mindspore

References · 9

• 🔥 https://gitee.com/mindspore/mindspore/issues/IBVKM8 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-3144 · Security Note
• https://vuldb.com/?ctiid.303049 · Note
• https://vuldb.com/?submit.525333 · Note
• https://t.me/cvenotify/117519 · Telegram Post
• https://t.me/cvedetector/21944 · Telegram Post
• https://twitter.com/CVEnew/status/1907709604949057612 · Twitter Post
• https://t.me/cvetracker/20656 · Telegram Post
• https://vuldb.com/?id.303049 · Note