Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
PaddlePaddle/Paddle
develop @ bfa2247
98
Fixes
1
CVEs
CRITICAL
Peak severity
18.4%
Coverage
Highlights
Denial of Service: 56 prior fixes. Scrutinize any change in this area.
paddle/phi/kernels: most-fixed (7 issues). Treat as high-risk during review.
38 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Integer Overflow: Recurring 32-bit index arithmetic in CUDA kernels causes out-of-bounds memory access and corruption on large tensors; many fixes widen to int64_t.
Denial of Service: Zero-size and zero-dimension tensors cause SIGFPE, invalid CUDA launches, and out-of-bounds access across many kernels; fixes add early-return size checks.
Deserialization of Untrusted Data: Unsafe pickle loading allows arbitrary code execution; fixes enforce allowlists and MRO checks, but bypasses are possible.