Google TensorFlow Denial of Service Vulnerability (CNVD-2023-15782)

Google TensorFlow is an end-to-end open source platform for machine learning from Google, Inc. A denial-of-service vulnerability exists in Google TensorFlow, which stems from the fact that the implementation of tf.reshape op in TensorFlow is vulnerable to an overflow in the number of elements in the tensor, resulting in a CHECK- failure (assertion failure), an attacker can use the vulnerability to trigger a denial-of-service attack.