Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
apache/incubator-mxnet
master @ b84609d
10
Fixes
0
CVEs
HIGH
Peak severity
25.0%
Coverage
Highlights
Memory Corruption: 4 prior fixes. Scrutinize any change in this area.
MKLDNNFCBackward: most-fixed (1 issue). Treat as high-risk during review.
6 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Memory Corruption: Inaccurate layout matching or buffer size calculations in MKLDNN dequantization operators can trigger out-of-bounds memory writes during tensor reordering. This introduces serious risk of process crash or arbitrary code execution during inference or training pipelines.
Integer Overflow: Using 32-bit index types for massive multidimensional NDArrays causes overflow conditions during indexing calculations. Upgrading core array representation loop indexes to 64-bit size_t is necessary to prevent wrapped integer heap overflows.
Use After Free: The custom computation executor is vulnerable to use-after-free conditions if graph execution node attributes are stored by reference instead of value, exposing the runtime to invalid pointer dereferences during asynchronous job scheduling.