Google TensorFlow code issue vulnerability (CNVD-2022-80685)

Google TensorFlow is an end-to-end open source platform for machine learning from Google, Inc. A code issue vulnerability exists in Google TensorFlow, which stems from a logical error in the organization of data, where the conversion from char to bool is undefined if the const char array is not 0...

Denial Of Service (DoS)

Tensorflow is vulnerable to denial of service. The vulnerability exists due to a segment fault in ndarraytensorbridge because the inputs are not properly validated which allows an attacker to cause an application crash...

Denial Of Service (DoS)

Tensorflow is vulnerable to denial of service. The vulnerability exists because the elementshape input is not properly validated which allows an attacker to cause an application crash due to a segmentation fault...

Denial Of Service (DoS)

tensorflow is vulnerable to denial of service DoS attacks. An attacker is able to cause denial of service conditions via providing an invalid encoded input through the CompositeTensorVariant tensor, which triggers a segmentation fault in tf.rawops.CompositeTensorVariantToComponents...

Denial Of Service (DoS)

tensorflow is vulnerable to denial of service DoS attacks. An attacker is able to cause denial of service conditions via providing an input token that is not a UTF-8 bytestring to tf.rawops.PyFunc, which may trigger a CHECK fail...

Denial Of Service (DoS)

tensorflow is vulnerable to denial of service DoS attacks. An attacker is able to cause denial of service conditions via providing a large input size through tf.rawops.ResizeNearestNeighborGrad, causing buffer overflows...

Denial Of Service (DoS)

tensorflow is vulnerable to denial of service DoS attacks. An attacker is able to cause denial of service conditions by providing a sparsematrix input that is not a matrix with a shape of rank 0, triggering a CHECK fail in tf.rawops.SparseMatrixNNZ...

Remote Code Execution

tensorflow is vulnerable to remote code execution. An attacker is able to cause buffer overflows by setting poolingratio input to less then 1, leading to heap memory access, possibly resulting in remote code execution...

Denial Of Service (DoS)

tensorflow is vulnerable to denial of service DoS attacks. An attacker is able to cause denial of service conditions due to improper validation of user Inputs, densefeatures and examplestatedata, resulting in a CHECK fail in SdcaOptimizer...

Denial Of Service (DoS)

tensorflow is vulnerable to denial of service DoS attacks. An attacker is able to cause denial of service conditions by providing empty inputs through SparseFillEmptyRowsGrad...

Denial Of Service (DoS)

Tensorflow is vulnerable to denial of service. The vulnerability exists because the input size of BCast::ToShape is not properly handled which allows an attacker to crash the application by sending inputs larger than int32...

Denial Of Service (DoS)

tensorflow is vulnerable to denial of service DoS attacks. When a MirrorPadGrad is given outsize input paddings, the library gives a heap out of bound error, which allows an attacker to cause tensorflow to crash...

Denial Of Service (DoS)

tensorflow is vulnerable to denial of service. A attacker can crash the application by providing outsize inputs to rowpoolingsequence and colpoolingsequence parameters in FractionMaxPoolGrad...

Denial Of Service (DoS)

tensorflow is vulnerable to denial of service. The vulnerability exists when the ThreadUnsafeUnigramCandidateSampler is given input to filterbankchannelcount greater than the allowed max size, allowing an attacker to crash the application...

Denial Of Service (DoS)

tensorflow is vulnerable to denial of service. The vulnerability exists because the PrintOneDimV2 function of tensor.cc does not properly convert char values to bool, allowing an attacker to cause an application crash...

Denial Of Service (DoS)

tensorflow is vulnerable to denial of service. The vulnerability exists because the Compute function of listkernels.cc does not properly validate the input size, allowing an attacker to cause an application crash by providing a non-scalar input...

Denial Of Service (DoS)

tensorflow is vulnerable to denial of service. The vulnerability exists because the SetOpAttrList function of pywraptfesrc.cc fails to parse the tensor and returns a nullptr without proper error handling, allowing an attacker to cause an application crash through the null pointer dereference...

GHSA-8W5G-3WCV-9G2J Tensorflow vulnerable to Out-of-Bounds Read

Impact When the BaseCandidateSamplerOp function receives a value in trueclasses larger than rangemax, a heap oob vuln occurs. python tf.rawops.ThreadUnsafeUnigramCandidateSampler trueclasses=0x100000,1, numtrue = 2, numsampled = 2, unique = False, rangemax = 2, seed = 2, seed2 = 2 Patches We have...

Tensorflow vulnerable to Out-of-Bounds Read

Impact When the BaseCandidateSamplerOp function receives a value in trueclasses larger than rangemax, a heap oob vuln occurs. python tf.rawops.ThreadUnsafeUnigramCandidateSampler trueclasses=0x100000,1, numtrue = 2, numsampled = 2, unique = False, rangemax = 2, seed = 2, seed2 = 2 Patches We have...

Google TensorFlow buffer overflow vulnerability (CNVD-2022-80696)

Google TensorFlow is an end-to-end open source platform for machine learning from Google Google. Google TensorFlow is vulnerable to a buffer overflow vulnerability that originates when an operation with a specified input size receives a different number of inputs, and the executor will crash. No...