Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2023-10606
HistorySep 20, 2022 - 12:00 a.m.

Google TensorFlow DrawBoundingBoxes Denial of Service Vulnerability

2022-09-2000:00:00
China National Vulnerability Database
www.cnvd.org.cn
15
google tensorflow
drawboundingboxes
denial of service
vulnerability
input box
assertion failure
attack

EPSS

0.001

Percentile

35.2%

Google TensorFlow is an end-to-end open source platform for machine learning from Google, Inc. A denial-of-service vulnerability exists in Google TensorFlow, which stems from the fact that when DrawBoundingBoxes receives input boxes that do not belong to the float dtype, it gives the assertion failure, and an attacker could use the vulnerability to trigger a denial-of-service attack.

EPSS

0.001

Percentile

35.2%

Related for CNVD-2023-10606