Lucene search

Heap OOB read in TFLite's implementation of `Minimum` or `Maximum`

🗓️ 21 May 2021 14:53:26Reported by GitHub Advisory DatabaseType

Heap OOB read in TFLite's Min or Ma

Reporter	Title	Published	Views	Family All 13
Veracode	Out-of-bounds Read	6 Sep 202412:36	–	veracode
Cvelist	CVE-2021-29590 Heap OOB read in TFLite's implementation of `Minimum` or `Maximum`	14 May 202119:22	–	cvelist
OSV	PYSEC-2021-518	14 May 202120:15	–	osv
OSV	BIT-tensorflow-2021-29590	6 Mar 202411:18	–	osv
OSV	PYSEC-2021-716	14 May 202120:15	–	osv
OSV	Heap OOB read in TFLite's implementation of `Minimum` or `Maximum`	21 May 202114:26	–	osv
OSV	PYSEC-2021-227	14 May 202120:15	–	osv
OSV	CVE-2021-29590	14 May 202120:15	–	osv
NVD	CVE-2021-29590	14 May 202120:15	–	nvd
CNVD	Google TensorFlow heap out-of-bounds read vulnerability (CNVD-2021-36336)	17 May 202100:00	–	cnvd

Vulners

Node

tensorflow\-gpuRange2.4.0–2.4.2

tensorflow\-gpuRange2.3.0–2.3.3

tensorflow\-gpuRange2.2.0–2.2.3

tensorflow\-gpuRange0–2.1.4

tensorflow\-cpuRange2.4.0–2.4.2

tensorflow\-cpuRange2.3.0–2.3.3

tensorflow\-cpuRange2.2.0–2.2.3

tensorflow\-cpuRange0–2.1.4

google tensorflowRange2.4.0–2.4.2

google tensorflowRange2.3.0–2.3.3

google tensorflowRange2.2.0–2.2.3

google tensorflowRange<2.1.4

Source	Link
github	www.github.com/tensorflow/tensorflow/security/advisories/GHSA-24x6-8c7m-hv3f
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-29590
github	www.github.com/tensorflow/tensorflow/commit/953f28dca13c92839ba389c055587cfe6c723578
github	www.github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-518.yaml
github	www.github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-716.yaml
github	www.github.com/tensorflow/tensorflow/blob/0d45ea1ca641b21b73bcf9c00e0179cda284e7e7/tensorflow/lite/kernels/internal/reference/maximum_minimum.h
github	www.github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-227.yaml
github	www.github.com/advisories/GHSA-24x6-8c7m-hv3f

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

21 May 2021 14:26Current

2.4Low risk

Vulners AI Score2.4

CVSS23.6

CVSS32.5 - 7.1

EPSS0.00042

CWE-125