Lucene search
+L

6 matches found

Github Security Blog
Github Security Blog
•added 2021/08/25 2:41 p.m.•42 views

Heap OOB in nested `tf.map_fn` with `RaggedTensor`s

Impact It is possible to nest a tf.mapfn within another tf.mapfn call. However, if the input tensor is a RaggedTensor and there is no function signature provided, code assumes the output is a fully specified tensor and fills output buffer with uninitialized contents from the heap: python import...

7.8CVSS7.8AI score0.00181EPSS
SaveExploits0References7Affected Software3
osv_cve
osv_cve
•added 2021/08/12 11:15 p.m.•30 views

CVE-2021-37679

TensorFlow is an end-to-end open source platform for machine learning. In affected versions it is possible to nest a tf.mapfn within another tf.mapfn call. However, if the input tensor is a RaggedTensor and there is no function signature provided, code assumes the output is a fully specified tens...

7.8CVSS7.6AI score
SaveExploits0References2
Prion
Prion
•added 2021/08/12 11:15 p.m.•28 views

Design/Logic Flaw

TensorFlow is an end-to-end open source platform for machine learning. In affected versions it is possible to nest a tf.mapfn within another tf.mapfn call. However, if the input tensor is a RaggedTensor and there is no function signature provided, code assumes the output is a fully specified tens...

4.6CVSS7.6AI score0.00181EPSS
SaveExploits0References2Affected Software1
Mend
Mend
•added 2021/08/12 10:20 p.m.•5 views

CVE-2021-37679

TensorFlow is an end-to-end open source platform for machine learning. In affected versions it is possible to nest a "tf.mapfn" within another "tf.mapfn" call. However, if the input tensor is a "RaggedTensor" and there is no function signature provided, code assumes the output is a fully specifie...

8.4CVSS0.00181EPSS
SaveExploits0References7
Cvelist
Cvelist
•added 2021/08/12 10:20 p.m.•53 views

CVE-2021-37679 Heap OOB in nested `tf.map_fn` with `RaggedTensor`s in TensorFlow

TensorFlow is an end-to-end open source platform for machine learning. In affected versions it is possible to nest a tf.mapfn within another tf.mapfn call. However, if the input tensor is a RaggedTensor and there is no function signature provided, code assumes the output is a fully specified tens...

7.1CVSS8.1AI score0.00181EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/08/12 12:00 a.m.•4 views

CVE-2021-37679: Out-of-bounds Read

TensorFlow is an end-to-end open source platform for machine learning. In affected versions it is possible to nest a tf.mapfn within another tf.mapfn call. However, if the input tensor is a RaggedTensor and there is no function signature provided, code assumes the output is a fully specified tens...

7.8CVSS5.9AI score0.00181EPSS
SaveExploits0References3
Rows per page
Query Builder