When performing the inference shape operation of the Transpose operator, if the value in the perm element is greater than or equal to the size of the input_shape, it will access data outside of bounds of input_shape which allocated from heap buffers.
{
"extracted_events": [
{
"cpe": "cpe:2.3:a:mindspore:mindspore:*:*:*:*:*:openeuler:*:*",
"range": [
{
"introduced": "1.0.0"
},
{
"fixed": "1.3.0"
}
],
"source": "CPE_RANGE"
},
{
"cpe": "cpe:2.3:a:mindspore:mindspore:0.7.0:beta:*:*:*:openeuler:*:*",
"range": [
{
"introduced": "0.7.0-beta"
},
{
"last_affected": "0.7.0-beta"
}
],
"source": "CPE_STRING"
}
]
}