This vulnerability concerns the use of a weak hash algorithm in the hash_features function of the fastdeploy/multimodal/hasher.py file in PaddlePaddle FastDeploy up to version 2.4.1. The weakness could potentially allow an attacker with local access to manipulate the hashing process, though exploitation is difficult and requires high complexity. A patch exists to address this issue, but no official remediation level or patch link is provided in the data. The CVSS 4.0 score is 2 (low), reflecting limited impact and exploitability.

The impact is limited due to the requirement for local access and the high complexity of exploitation. The weakness in the hash function may affect data integrity or related operations relying on the hash, but no direct impact such as privilege escalation or remote code execution is indicated. No known active exploitation has been reported.

Applying the patch identified by commit 374945747652a8d32965591c0c01a00c88b7067f is advised to resolve this vulnerability. Since no official vendor advisory or patch link is provided, users should monitor PaddlePaddle's official channels for the patch release and apply it promptly. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance.