Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-87258
HistoryNov 23, 2022 - 12:00 a.m.

Google TensorFlow tf.raw_ops.ImageProjectiveTransformV2 buffer overflow vulnerability

2022-11-2300:00:00
China National Vulnerability Database
www.cnvd.org.cn
6
google tensorflow
buffer overflow
imageprojectivetransformv2
vulnerability
validation
attacker
exploit
cnvd.

0.001 Low

EPSS

Percentile

43.6%

Google TensorFlow is an end-to-end open source platform for machine learning from Google, Inc. A buffer overflow vulnerability exists in versions of Google TensorFlow prior to 2.8.4, 2.9.0 and later, and prior to 2.9.3, which originates from “tf.raw_ops. ImageProjectiveTransformV2” lacks proper validation of user-supplied data, which could be exploited by an attacker to potentially cause a buffer overflow.

0.001 Low

EPSS

Percentile

43.6%