Google Tensorflow Denial of Service Vulnerability (CNVD-2022-13928)

TensorFlow is an end-to-end open source machine learning platform. It has a comprehensive and flexible ecosystem of tools, libraries, and community resources that help researchers advance advanced machine learning techniques and enable developers to easily build and deploy applications powered by machine learning. a denial-of-service vulnerability exists in TensorFlow, which stems from a ThreadPoolHandle allocating too much memory that The num_threads parameter is only checked for non-negative numbers. An attacker could exploit this vulnerability to cause a denial of service.