Lucene search
GoogleOSV:PYSEC-2020-331HistoryOct 21, 2020 - 9:15 p.m.
PYSEC-2020-331
2020-10-2121:15:00
Google
osv.dev
14
tensorflow
version 2.4.0
cpu kernel
segmentation fault
EPSS
0.002
Percentile
54.3%
In Tensorflow before version 2.4.0, when the boxes argument of tf.image.crop_and_resize has a very large value, the CPU kernel implementation receives it as a C++ nan floating point value. Attempting to operate on this is undefined behavior which later produces a segmentation fault. The issue is patched in eccb7ec454e6617738554a255d77f08e60ee0808 and TensorFlow 2.4.0 will be released containing the patch. TensorFlow nightly packages after this commit will also have the issue resolved.
Related
prion
prion
Design/Logic Flaw
2020-10-21 21:15:00
github
github
Float cast overflow undefined behavior
2020-11-13 17:18:29
nvd
nvd
CVE-2020-15266
2020-10-21 21:15:12
veracode
veracode
Denial Of Service (DoS)
2020-10-22 03:09:35
cvelist
cvelist
CVE-2020-15266 Undefined behavior in Tensorflow
2020-10-21 20:30:16
cve
cve
CVE-2020-15266
2020-10-21 21:15:12
osv
osv
Float cast overflow undefined behavior
2020-11-13 17:18:29
BIT-tensorflow-2020-15266
2024-03-06 11:20:19
CVE-2020-15266
2020-10-21 21:15:12
