CVE-2022-46742: Paddlepaddle

Critical severity, CVSS 9.8. EPSS: 1.2% chance of exploitation in the next 30 days.

Code injection in paddle.audio.functional.get_window in PaddlePaddle 2.4.0-rc0 allows arbitrary code execution.

Affected products

• Paddlepaddle Paddlepaddle: version 2.4.0 only

Published 2022-12-07. Last modified 2026-06-17.