Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
microsoft/cntk
master @ 10a8ffc
6
Fixes
0
CVEs
HIGH
Peak severity
50.0%
Coverage
Highlights
Memory Safety: 2 prior fixes. Scrutinize any change in this area.
Source/CNTKv2LibraryDll/Value.cpp: most-fixed (1 issue). Treat as high-risk during review.
5 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Memory Corruption: Parsing binary MLF files without rigid length limits can trigger heap buffer overflows when reading binary segments with oversized utterance labels.
Use After Free: Referencing transient chunk memory inside deserializers instead of duplicating and owning the buffer leads to use-after-free conditions.
Memory Safety: Mismatched or missing sequence keys during stream bundling operations can lead to out-of-bounds sequence accesses and crashes unless safe placeholders are validated.