# MSSA-2021-003 - Security Advisory

## Published Date

2021-10-18

## Last Modified Date

2021-10-25

## Impact

When the Reduce operator run operation is executed, if there is a value of 0 in the parameter axis_sizes element, it will cause a division by 0 exception.

## Patch

We have fixed this issue in version 1.3.0 through commit [e0cbe113745a38be7b3afa0dff63a819e4490005](https://gitee.com/mindspore/mindspore/commit/e0cbe113745a38be7b3afa0dff63a819e4490005), and created a [patch](/https://gitee.com/mindspore/community/blob/master/security/cve_patch/mssa-2021-003.patch) for this vulnerability.

## CVE

To be updated.

## Attribution

This vulnerability has been reported by Wang Xuan(@May) of Qihoo 360 AIVul Team.
