Google TensorFlow buffer overflow vulnerability (CNVD-2022-11509)

Google TensorFlow is an end-to-end open source platform for machine learning from Google (Google). Google Tensorflow has a buffer overflow vulnerability that stems from the fact that Dequantize’s implementation does not fully validate the value of axis, which can be exploited by an attacker to cause heap OOB access.