{"data":{"id":"e562cb1b-8183-4615-892e-1ff2604447a4","title":"CVE-2019-10844: nbla/logger.cpp in libnnabla.a in Sony Neural Network Libraries (aka nnabla) through v1.0.14 relies on the HOME…","summary":"CVE-2019-10844 affects nbla/logger.cpp in libnnabla.a in Sony Neural Network Libraries (aka nnabla) through v1.0.14. The component relies on the HOME environment variable, which might be untrusted. NVD has not yet provided an assessment, and the weakness is classified as NVD-CWE-noinfo (Insufficient Information).","solution":"The source text references a patch at https://github.com/sony/nnabla/issues/209, but does not state the fix or a fixed version.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2019-10844","publishedAt":"2019-04-04T05:29:00.190Z","cveId":"CVE-2019-10844","cweIds":null,"cvssScore":"7.5","cvssSeverity":null,"severity":"medium","attackType":[],"issueType":"vulnerability","affectedPackages":["nnabla@< 1.0.10 (fixed: 1.0.10)"],"affectedPackageNames":["nnabla"],"affectedPackageRefs":["pypi:nnabla"],"affectedVendors":[],"affectedVendorsRaw":["Sony Neural Network Libraries (nnabla)","libnnabla"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"Sony Neural Network Libraries (nnabla) trusts HOME environment variable","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.01552,"epssCheckedAt":"2026-11-04T18:09:14.608Z","kevDateAdded":null,"advisoryAliases":["GHSA-4q2w-rw7m-xqw6"],"affectedPackagesSource":"ghsa","affectedPackagesCheckedAt":"2026-10-10T04:01:13.867Z","patchAvailable":true,"disclosureDate":null,"fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":"2026-10-29T21:53:02.818Z","capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["integrity"],"aiComponentTargeted":"framework","llmSpecific":false,"classifierConfidence":0.85,"researchCategory":null,"atlasIds":null,"fixes":[{"ecosystem":"pypi","name":"nnabla","fixedVersion":"1.0.10","matchedVersion":null,"fixReleasedAt":null,"daysToFix":null,"match":"ecosystem","source":"registry","status":"version_not_found","checkedAt":"2026-10-29T21:53:02.664Z"}]}}