Google TensorFlow buffer overflow vulnerability (CNVD-2021-87034)

Google TensorFlow is an end-to-end open source platform for machine learning from Google, U.S. A buffer overflow vulnerability exists in Google TensorFlow, which stems from the fact that the ImmutableConst operation can be tricked into reading arbitrary memory content. This is because the TensorFlow string class (tstring) has a special case for memory-mapped strings, but the operation itself does not provide any support for this data type. No detailed vulnerability details are provided at this time.