CVE-2025-3145

4.8 mediumEPSS 0.2%

Medium (4.8). EPSS 0.2% chance of exploitation in the next 30 days.

A vulnerability, which was classified as problematic, has been found in MindSpore 2.5.0. Affected by this issue is the function mindspore.numpy.fft.rfft2. The manipulation leads to memory corruption. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used.

Severity

CVSS 4.0

4.8 medium

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N

CVSS 3.1

3.3 low

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 8% of CVEs (scores of 2026-10-31)
CWE: CWE-119
Published: 2025-04-03
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

References

https://gitee.com/mindspore/mindspore/issues/IBVKM8
https://vuldb.com/?ctiid.303050
https://vuldb.com/?id.303050

Check your stack JSON