PYSEC-2021-603

TensorFlow is an end-to-end open source platform for machine learning. In affected versions when running shape functions, some functions such as MutableHashTableShape produce extra output information in the form of a ShapeAndType struct. The shapes embedded in this struct are owned by an inferenc...

Google TensorFlow buffer overflow vulnerability (CNVD-2021-64535)

Google TensorFlow is an end-to-end open source platform for machine learning from Google, Inc. A buffer overflow vulnerability exists in Google TensorFlow due to a lack of valid restrictions in tf.rawops.ResourceGather in the affected version, which could be exploited by an attacker to A crash ca...

Google TensorFlow code issue vulnerability (CNVD-2021-64540)

Google TensorFlow is an end-to-end open source platform for machine learning from Google, Inc. A security vulnerability exists in Google TensorFlow, which could be exploited to cause undefined behavior by binding references to null pointers in all binary "cwise" operations that do not require...

Google TensorFlow 'tf.raw_ops.SdcaOptimizerV2' Information Disclosure Vulnerability

Google TensorFlow is an end-to-end open source machine learning platform. An information disclosure vulnerability exists in Google TensorFlow 'tf.rawops.SdcaOptimizerV2'. An attacker can exploit this vulnerability to obtain sensitive information...

Google TensorFlow TensorFlow sparse reduction information disclosure vulnerability

Google TensorFlow is an end-to-end open source machine learning platform. an information disclosure vulnerability exists in Google TensorFlow TensorFlow sparse reduction. An attacker could exploit this vulnerability to read data from outside the boundaries of the heap allocation data or cause a...

Google TensorFlow buffer overflow vulnerability (CNVD-2021-64536)

Google TensorFlow is an end-to-end open source platform for machine learning from Google, Inc. A buffer overflow vulnerability exists in Google TensorFlow, which stems from the fact that in affected versions, an attacker could exploit the vulnerability by sending an invalid argument to tf.rawops...

Google TensorFlow 'tf.raw_ops.NonMaxSuppressionV5' Denial of Service Vulnerability Vulnerability

Google TensorFlow is an end-to-end open source machine learning platform. A security vulnerability exists in tf.rawops.NonMaxSuppressionV5 in Google TensorFlow versions prior to 2.6.0. An attacker could exploit the vulnerability to cause a denial of service...

Google TensorFlow Denial of Service Vulnerability (CNVD-2021-63076)

Google TensorFlow is an end-to-end open source machine learning platform. A security vulnerability exists in Google TensorFlow versions prior to 2.6.0. An attacker could exploit the vulnerability to cause a denial of service...

Google TensorFlow Denial of Service Vulnerability (CNVD-2021-63066)

Google TensorFlow is an end-to-end open source machine learning platform. a security vulnerability exists in the full connectivity layer in TFLite in versions prior to Google TensorFlow 2.6.0. A local attacker could exploit this vulnerability to cause a denial of service...

Google TensorFlow Denial of Service Vulnerability (CNVD-2021-63067)

Google TensorFlow is an end-to-end open source machine learning platform. a denial-of-service vulnerability exists in Google TensorFlow. An attacker can exploit this vulnerability to cause a denial of service...

Google TensorFlow Denial of Service Vulnerability (CNVD-2021-63069)

Google TensorFlow is an end-to-end open source machine learning platform. A security vulnerability exists in Google TensorFlow versions prior to 2.6.0. The vulnerability stems from the MLIR optimization of the L2NormalizeReduceAxis operator. An attacker can exploit the vulnerability to cause a...

Google TensorFlow TFLite Denial of Service Vulnerability

Google TensorFlow is an end-to-end open source machine learning platform. A denial of service vulnerability exists in Google TensorFlow TFLite. A local attacker can exploit this vulnerability to cause a denial of service condition...

Google TensorFlow buffer overflow vulnerability (CNVD-2021-64537)

Google TensorFlow is an end-to-end open source platform for machine learning from Google, Inc. A security vulnerability exists in Google TensorFlow, which could be exploited to cause undefined behavior by binding a reference to a null pointer in "tf.rawops. lead to undefined behavior...

Google TensorFlow tf.raw_ops.SaveV2 denial of service vulnerability

Google TensorFlow is an end-to-end open source machine learning platform. a security vulnerability exists in Google TensorFlow versions prior to 2.6.0. The vulnerability stems from code in tf.rawops.SaveV2 that fails to properly validate input. A local attacker could exploit this vulnerability to...

Google TensorFlow "tf.raw_ops.UpperBound" Information Disclosure Vulnerability

Google TensorFlow is an end-to-end open source machine learning platform. A security vulnerability exists in Google TensorFlow "tf.rawops.UpperBound". An attacker could exploit this vulnerability to read data from outside the boundaries of the heap allocation data and use this information to laun...

Google TensorFlow buffer overflow vulnerability (CNVD-2021-64533)

Google TensorFlow, an end-to-end open source platform for machine learning from Google, has a security vulnerability stemming from the program "tf.rawops. DatasetToTFRecord" implementations can trigger heap buffer overflow and segmentation errors. No detailed vulnerability details are available...

Google TensorFlow Arbitrary Code Execution Vulnerability

Google TensorFlow is an end-to-end open source machine learning platform. An arbitrary code execution vulnerability exists in Google TensorFlow versions prior to 2.6.0. The vulnerability stems from YAML deserialization. An attacker can exploit this vulnerability to execute arbitrary code...

Google TensorFlow Denial of Service Vulnerability (CNVD-2021-63083)

Google TensorFlow is an end-to-end open source machine learning platform. A denial of service vulnerability exists in tf.rawops.MapStage in Google TensorFlow versions prior to 2.6.0. An attacker can exploit this vulnerability to cause a denial of service...

Google TensorFlow Information Disclosure Vulnerability (CNVD-2021-63070)

Google TensorFlow is an end-to-end open source machine learning platform. A security vulnerability exists in Google TensorFlow versions prior to 2.6.0. An attacker can exploit the vulnerability to obtain sensitive information...

Google TensorFlow buffer overflow vulnerability (CNVD-2021-64543)

Google TensorFlow, an end-to-end open source platform for machine learning from Google, Inc. is vulnerable to security flaws that could be exploited by attackers by sending specially crafted illegal parameters to "BoostedTreesSparseCalculateBestFeatureSplit" by sending specially crafted illegal...