CVE-2021-33648

CVE-2021-33648 describes an out-of-bounds read vulnerability affecting Huawei MindSpore. Specifically, when processing inference shape operations for certain operators with a zero-sized input shape, the software attempts to access data beyond the allocated heap buffer. This flaw carries a CVSSv3 score of 7.5 (High), indicating it can be exploited remotely without user interaction to achieve high confidentiality impact, though integrity and availability are not affected. Currently, there is no public exploit code available, nor is there evidence of active exploitation or significant community discussion surrounding this vulnerability.