-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| PaddlePaddle | pip | < 2.6.0 | 2.6.0 |
Miggo AIRoot Cause AnalysisThe vulnerability stems from unvalidated tensor dimensions in MatrixRankTolKernel. The patch adds PADDLE_ENFORCE_NE checks for rows/cols being zero before calculating batches = numel/(rows*cols). The CVE description specifically implicates paddle.linalg.matrix_rank, which maps to this kernel. The other patched files (nanmedian_kernel) address similar issues but aren't directly tied to the matrix_rank vulnerability description.
A Semantic Attack on Google Gemini - Read the Latest Research