MindSpore Memory Corruption Vulnerability in FFT Functions

A memory corruption vulnerability has been identified in MindSpore version 2.5.0. The issue arises in the 'mindspore.numpy.fft.rfft2' and 'mindspore.numpy.fft.hfftn' functions, where improper handling of input can lead to segmentation faults, causing a denial-of-service condition. This vulnerability must be exploited locally.

Impact

Exploitation of this vulnerability leads to a segmentation fault, causing a denial-of-service condition by crashing the application.

Reproduction

The vulnerability can be reproduced by importing the 'mindspore.numpy' module and creating a tensor with the 'randint' function. The 'hfftn' function can be called with an empty 'axes' parameter, which will trigger a segmentation fault. Similarly, the 'rfft2' function can be called with a tensor created in the same manner, also resulting in a segmentation fault.