{"id":"CVE-2021-33649","details":"When performing the inference shape operation of the Transpose operator, if the value in the perm element is greater than or equal to the size of the input_shape, it will access data outside of bounds of input_shape which allocated from heap buffers.","modified":"2026-07-09T00:06:08.870114Z","published":"2022-06-27T17:15:08.733Z","references":[{"type":"FIX","url":"https://gitee.com/mindspore/community/blob/master/security/security_advisory_list/mssa-2021-006_en.md"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/mindspore-ai/mindspore","events":[{"introduced":"685a77c7c3c728f24c630984387147d61434fbd3"},{"fixed":"cfbb0d0dfad1fa4e6f6b8310f6e2cf79db639213"},{"introduced":"29fabd1324cee59794583ddbb94c888f5ba5d205"},{"last_affected":"29fabd1324cee59794583ddbb94c888f5ba5d205"}],"database_specific":{"cpe":["cpe:2.3:a:mindspore:mindspore:*:*:*:*:*:openeuler:*:*","cpe:2.3:a:mindspore:mindspore:0.7.0:beta:*:*:*:openeuler:*:*"],"extracted_events":[{"introduced":"1.0.0"},{"fixed":"1.3.0"},{"introduced":"0.7.0-beta"},{"last_affected":"0.7.0-beta"}],"source":["CPE_RANGE","CPE_STRING"]}}],"versions":["0.7.0-beta","v0.7.0-beta"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-33649.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"}]}