CVE-2025-3145: MindSpore mindspore.numpy.fft.rfft2 memory corruption

Severity: low (CVSS 3.3 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2025-04-03 · updated 2026-06-17
Weakness: CWE-119

Description

A vulnerability, which was classified as problematic, has been found in MindSpore 2.5.0. Affected by this issue is the function mindspore.numpy.fft.rfft2. The manipulation leads to memory corruption. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used.

Affected products

openEuler:mindspore: 2.5.0

References

https://gitee.com/mindspore/mindspore/issues/IBVKM8
https://vuldb.com/?ctiid.303050
https://vuldb.com/?id.303050

Get alerted when CVE-2025-3145 or the next vulnerability affects your stack