EUVD-2025-37638

A logic issue was addressed with improved checks. This issue is fixed in iOS 26.1 and iPadOS 26.1. An attacker with physical access to a locked device may be able to view sensitive user information...

CVE-2021-37638

TensorFlow is an end-to-end open source platform for machine learning. Sending invalid argument for rowpartitiontypes of tf.rawops.RaggedTensorToTensor API results in a null pointer dereference and undefined behavior. The implementation accesses the first element of a user supplied list of values...

Security Bulletin: TensorFlow is vulnerable to security CVEs used in IBM Maximo Application Suite - Monitor Component

Summary IBM Maximo Application Suite - Monitor Component uses Tensorflow which is vulnerable to security CVEs. Vulnerability Details CVEID:CVE-2021-37635 DESCRIPTION: TensorFlow could allow a local authenticated attacker to obtain sensitive information, caused by a heap out-of-bounds read flaw in...

SUSE CVE-2021-37638

TensorFlow is an end-to-end open source platform for machine learning. Sending invalid argument for rowpartitiontypes of tf.rawops.RaggedTensorToTensor API results in a null pointer dereference and undefined behavior. The implementation accesses the first element of a user supplied list of values...

Security Bulletin: IBM Watson Discovery for IBM Cloud Pak for Data affected by vulnerability in TensorFlow

Summary IBM Watson Discovery for IBM Cloud Pak for Data contains a vulnerable version of TensorFlow. Vulnerability Details CVEID: CVE-2021-37635 DESCRIPTION: TensorFlow could allow a local authenticated attacker to obtain sensitive information, caused by a heap out-of-bounds read flaw in the...

alphapulldown (>=0.21.2, <=0.22.3), autokeras (1.0.16) +44 more potentially affected by CVE-2021-37638 via tensorflow (2.5.0)

tensorflow PYPI version 2.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - alphapulldown =0.21.2, =1.1.0, =0.8.1, =3.3.0, =0.0.24, =1.0.0, =2.0.2, =0.7.0, =0.3.11, =1.33.0, =1.33.3 and more Source cves: CVE-2021-376...

abmarl (>=0.1.1, <=0.1.3), agrothon (>=1.1.5, <=1.3.2) +82 more potentially affected by CVE-2021-37638 via tensorflow (>=2.4.0, <=2.4.2)

tensorflow PYPI version =2.4.0, =0.1.1, =1.1.5, =2.1.0, =0.0.1, =0.0.6, =0.1.0, =1.4.0, =1.2.2, =20210221.0.0, =0.7.2, =0.7.4 and more Source cves: CVE-2021-37638 Source advisory: GHSA-HWR7-8GXX-FJ5P...

alphapulldown (>=0.21.2, <=0.22.3), autokeras (1.0.16) +44 more potentially affected by CVE-2021-37638 via tensorflow (2.5.0)

tensorflow PYPI version 2.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - alphapulldown =0.21.2, =1.1.0, =0.8.1, =3.3.0, =0.0.24, =1.0.0, =2.0.2, =0.7.0, =0.3.11, =1.33.0, =1.33.3 and more Source cves: CVE-2021-376...

abmarl (>=0.1.1, <=0.1.3), agrothon (>=1.1.5, <=1.3.2) +82 more potentially affected by CVE-2021-37638 via tensorflow (>=2.4.0, <=2.4.2)

tensorflow PYPI version =2.4.0, =0.1.1, =1.1.5, =2.1.0, =0.0.1, =0.0.6, =0.1.0, =1.4.0, =1.2.2, =20210221.0.0, =0.7.2, =0.7.4 and more Source cves: CVE-2021-37638 Source advisory: OSV:PYSEC-2021-260...

c4v-py (>=0.1.0.dev1, <=0.1.0.dev202107081840) potentially affected by CVE-2021-37638 via tensorflow-cpu (2.3.1)

tensorflow-cpu PYPI version 2.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow-cpu and may be impacted: - c4v-py =0.1.0.dev1, =0.1.0.dev202107081840 Source cves: CVE-2021-37638 Source advisory: OSV:PYSEC-2021-551...

abba-python (>=0.1.6, <=0.3.0), accuinsight (>=1.0.1, <=3.0.0) +672 more potentially affected by CVE-2021-37638 via tensorflow (>=1.0.1, <=2.3.2)

tensorflow PYPI version =1.0.1, =0.1.6, =1.0.1, =1.2.0, =1.1.2, =0.0.1, =0.3.26, =0.0.1, =0.2.0, =0.3.1, =0.5.0, =0.8.0 and more Source cves: CVE-2021-37638 Source advisory: MEND:CVE-2021-37638...

alphapulldown (>=0.21.2, <=0.22.3), autokeras (1.0.16) +44 more potentially affected by CVE-2021-37638 via tensorflow (2.5.0)

tensorflow PYPI version 2.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - alphapulldown =0.21.2, =1.1.0, =0.8.1, =3.3.0, =0.0.24, =1.0.0, =2.0.2, =0.7.0, =0.3.11, =1.33.0, =1.33.3 and more Source cves: CVE-2021-376...

CVE-2021-37638

CVE-2021-37638 : TensorFlow vulnerable to a NULL pointer dereference in the RaggedTensorToTensor path caused by sending an empty row_partition_types list. The issue stems from accessing the first element of a user-supplied list without validating non-emptiness. A patch was applied in GitHub commi...