Google TensorFlow buffer overflow vulnerability (CNVD-2022-11507)

Google TensorFlow is an end-to-end open source platform for machine learning from Google (Google). Google Tensorflow has a buffer overflow vulnerability, which stems from the implementation of ReverseSequence’s shape inference does not fully validate the value of batch dim, and an attacker can exploit the vulnerability to cause a read heap OOB.