MindSpore FFT functions memory corruption (CVE-2025-3145)
MindSpore 2.5.0's FFT functions crash with segmentation faults when called with empty axes parameters, potentially enabling denial of service attacks against applications using the library.
What happened
Segmentation faults occur in MindSpore 2.5.0 when executing `mindspore.numpy.fft.hfftn` and `mindspore.numpy.fft.rfft2` functions with empty `axes` parameters.
The first case triggers the fault by calling `np.fft.hfftn(test_tensor, axes=())` on a 2×2 integer tensor. The second case calls `mnp.fft.rfft2(test_tensor, axes=())` on a 1×1×1×1×1 integer tensor.
Reported impact
The crashes create a potential denial of service attack vector, as the functions can be triggered to crash the application without requiring special privileges or valid mathematical operations.
Classification
Sources and evidence
Sources not yet published
This record was researched and written by the Index from original reporting. Its sources are still being verified by an editor, and they are listed here once that check is complete. Until then the record carries no reviewer.