Lucene search

K
osvGoogleOSV:PYSEC-2022-154
HistoryFeb 04, 2022 - 11:15 p.m.

PYSEC-2022-154

2022-02-0423:15:00
Google
osv.dev
5
tensorflow
security vulnerability
github commits

EPSS

0.002

Percentile

57.4%

Tensorflow is an Open Source Machine Learning Framework. A GraphDef from a TensorFlow SavedModel can be maliciously altered to cause a TensorFlow process to crash due to encountering a StatusOr value that is an error and forcibly extracting the value from it. We have patched the issue in multiple GitHub commits and these will be included in TensorFlow 2.8.0 and TensorFlow 2.7.1, as both are affected.

EPSS

0.002

Percentile

57.4%