What’s Vulnerable › Vulnerabilities

CVE-2024-1603: confirmed

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.6% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2024-03-23 · updated 2026-06-17
• Weakness: CWE-73

Description

paddlepaddle/paddle 2.6.0 allows arbitrary file read via paddle.vision.ops.read_file.

Affected products

• paddlepaddle/paddle: 2.6.0

References

• https://huntr.com/bounties/7739eced-73a3-4a96-afcd-9c753c55929e
• https://huntr.com/bounties/7739eced-73a3-4a96-afcd-9c753c55929e

Get alerted when CVE-2024-1603 or the next vulnerability affects your stack