Float cast overflow undefined behavior

🗓️ 13 Nov 2020 17:18:29Reported by GitHub Advisory DatabaseType

Float cast overflow vulnerability in tf.image.crop_and_resiz

Reporter	Title	Published	Views	Family All 26
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities fixed in IBM Maximo Application Suite Monitor	18 Mar 202217:24	–	ibm
IBM Security Bulletins	Security Bulletin: TensorFlow in Watson Machine Learning Community Edition 1.6.2 and 1.7.0 has been patched for various security issues.	4 Feb 202123:37	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery for IBM Cloud Pak for Data affected by vulnerability in TensorFlow	27 Feb 202103:40	–	ibm
CNVD	Google TensorFlow Buffer Overflow Vulnerability (CNVD-2020-62809)	23 Oct 202000:00	–	cnvd
CVE	CVE-2020-15266	21 Oct 202020:30	–	cve
Cvelist	CVE-2020-15266 Undefined behavior in Tensorflow	21 Oct 202020:30	–	cvelist
Debian CVE	CVE-2020-15266	21 Oct 202020:30	–	debiancve
EUVD	EUVD-2020-0212	7 Oct 202500:30	–	euvd
NVD	CVE-2020-15266	21 Oct 202021:15	–	nvd
OSV	BIT-TENSORFLOW-2020-15266 Undefined behavior in Tensorflow	6 Mar 202411:20	–	osv

Vulners

Node

tensorflow-gpuRange<2.4.0pip

tensorflow-cpuRange<2.4.0pip

Source	Link
github	www.github.com/tensorflow/tensorflow/security/advisories/GHSA-xwhf-g6j5-j5gc
nvd	www.nvd.nist.gov/vuln/detail/CVE-2020-15266
github	www.github.com/tensorflow/tensorflow/issues/42129
github	www.github.com/tensorflow/tensorflow/pull/42143/commits/3ade2efec2e90c6237de32a19680caaa3ebc2845
github	www.github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2020-296.yaml
github	www.github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2020-331.yaml
github	www.github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2020-139.yaml
github	www.github.com/advisories/GHSA-xwhf-g6j5-j5gc

28 Oct 2024 14:46Current

1.8Low risk

Vulners AI Score1.8

CVSS 25

CVSS 3.13.7 - 7.5

EPSS0.00129