MindSpore Memory Corruption Vulnerability in FFT Functions

A memory corruption vulnerability has been identified in MindSpore version 2.5.0. The issue arises in the functions 'mindspore.numpy.fft.hfftn' and 'mindspore.numpy.fft.rfft2', where improper handling of data can lead to memory corruption. This vulnerability can be exploited locally.

Impact

Exploitation of this vulnerability leads to a segmentation fault, causing a denial-of-service condition by crashing the application.

Reproduction

The vulnerability can be reproduced by calling the 'mindspore.numpy.fft.hfftn' or 'mindspore.numpy.fft.rfft2' functions in MindSpore version 2.5.0. The improper handling of data in these functions will cause a segmentation fault, crashing the application.