Google TensorFlow Buffer Overflow Vulnerability (CNVD-2023-43888)

Google TensorFlow is a suite of end-to-end open source platforms for machine learning from Google (USA). Google TensorFlow suffers from a buffer overflow vulnerability that originates from a boundary error in TAvgPoolGrad when handling untrusted input. A remote attacker could exploit the vulnerability to execute arbitrary code on the system or cause a denial-of-service attack.