CVE-2025-3144

4.8 mediumEPSS 0.2%

Medium (4.8). EPSS 0.2% chance of exploitation in the next 30 days.

A vulnerability classified as problematic was found in MindSpore 2.5.0. Affected by this vulnerability is the function mindspore.numpy.fft.hfftn. The manipulation leads to memory corruption. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used.

Severity

CVSS 4.0

4.8 medium

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N

CVSS 3.1

3.3 low

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 8% of CVEs (scores of 2026-10-31)
CWE: CWE-119
Published: 2025-04-03
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

References

https://gitee.com/mindspore/mindspore/issues/IBVKM8
https://vuldb.com/?ctiid.303049
https://vuldb.com/?id.303049
https://vuldb.com/?submit.525333

Check your stack JSON