Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-80685
HistoryNov 23, 2022 - 12:00 a.m.

Google TensorFlow code issue vulnerability (CNVD-2022-80685)

2022-11-2300:00:00
China National Vulnerability Database
www.cnvd.org.cn
13
google tensorflow
machine learning
vulnerability
logical error
data organization
char to bool conversion
crash
program attack.

EPSS

0.001

Percentile

40.2%

Google TensorFlow is an end-to-end open source platform for machine learning from Google, Inc. A code issue vulnerability exists in Google TensorFlow, which stems from a logical error in the organization of data, where the conversion from char to bool is undefined if the const char* array is not 0 or 1. and therefore sanitizers/fuzzers will crash. An attacker could exploit this vulnerability to crash the program.

EPSS

0.001

Percentile

40.2%