Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-09889
HistoryFeb 09, 2022 - 12:00 a.m.

Google Tensorflow Input Validation Error Vulnerability (CNVD-2022-09889)

2022-02-0900:00:00
China National Vulnerability Database
www.cnvd.org.cn
13
google
tensorflow
input validation
vulnerability
integer overflow
range implementation
attacker
undefined behavior
large assignments
cnvd-2022-09889

EPSS

0.001

Percentile

50.0%

Google TensorFlow is an end-to-end open source platform for machine learning from Google (USA). Google TensorFlow is vulnerable to an input validation error that stems from an integer overflow in the Range implementation, which could be exploited by an attacker to trigger undefined behavior or, in some cases, a large assignments.

EPSS

0.001

Percentile

50.0%