When performing the inference shape operation of the Transpose operator, if the value in the perm element is greater than or equal to the size of the input_shape, it will access data outside of bounds of input_shape which allocated from heap buffers.
{
"cpe": [
"cpe:2.3:a:mindspore:mindspore:*:*:*:*:*:openeuler:*:*",
"cpe:2.3:a:mindspore:mindspore:0.7.0:beta:*:*:*:openeuler:*:*"
],
"extracted_events": [
{
"introduced": "1.0.0"
},
{
"fixed": "1.3.0"
},
{
"introduced": "0.7.0-beta"
},
{
"last_affected": "0.7.0-beta"
}
],
"source": [
"CPE_RANGE",
"CPE_STRING"
]
}