Google TensorFlow Input Validation Error Vulnerability (CNVD-2023-15775)

Google TensorFlow is an open source platform for machine learning from Google, Inc. An input validation error vulnerability exists in Google TensorFlow, which stems from the fact that entering ‘dense_features’ or ‘example_state_data’ that is not rank 2 will trigger a ‘CHECK’ failure in ‘SdcaOptimizer’. SdcaOptimizer’ in the trigger ‘CHECK’ failure, an attacker can use the vulnerability to cause the program to crash.