Google TensorFlow buffer overflow vulnerability (CNVD-2022-11510)

Google TensorFlow is an end-to-end open source platform for machine learning from Google (USA). Google TensorFlow has a buffer overflow vulnerability, which stems from the fact that the implementation of SparseCountSparseOutput is prone to heap overflow and can be exploited by an attacker to cause a denial of service.