PYSEC-2021-627

TensorFlow is an open source platform for machine learning. In affected versions the shape inference code for AllToAll can be made to execute a division by 0. This occurs whenever the splitcount argument is 0. The fix will be included in TensorFlow 2.7.0. We will also cherrypick this commit on...

CVE-2021-41218

TensorFlow is an open source platform for machine learning. In affected versions the shape inference code for AllToAll can be made to execute a division by 0. This occurs whenever the splitcount argument is 0. The fix will be included in TensorFlow 2.7.0. We will also cherrypick this commit on...

PYSEC-2021-833

TensorFlow is an open source platform for machine learning. In affected versions the implementation of SparseBinCount is vulnerable to a heap OOB access. This is because of missing validation between the elements of the values argument and the shape of the sparse output. The fix will be included ...

CVE-2021-41210

TensorFlow is an open source platform for machine learning. In affected versions the shape inference functions for SparseCountSparseOutput can trigger a read outside of bounds of heap allocated array. The fix will be included in TensorFlow 2.7.0. We will also cherrypick this commit on TensorFlow...

PT-2021-23191 · Google · Tensorflow

Name of the Vulnerable Software and Affected Versions: TensorFlow versions prior to 2.7.0 TensorFlow versions 2.6.1 and earlier TensorFlow versions 2.5.2 and earlier TensorFlow versions 2.4.4 and earlier Description: TensorFlow is an open source platform for machine learning. In affected versions...

PT-2021-23199 · Google · Tensorflow

Name of the Vulnerable Software and Affected Versions: TensorFlow versions prior to 2.7.0 TensorFlow versions 2.6.1 and earlier TensorFlow versions 2.5.2 and earlier TensorFlow versions 2.4.4 and earlier Description: The implementation of SparseBinCount is vulnerable to a heap out-of-bounds OOB...

Google TensorFlow 缓冲区错误漏洞

Google TensorFlow, an end-to-end open source machine learning platform, suffers from a heap out-of-bounds access vulnerability in the SparseBinCount implementation in versions prior to TensorFlow 2.7.0. The vulnerability stems from missing validation between the elements of the values parameter a...

QEMU: virtio-net: heap use-after-free in virtio_net_receive_rcu

A use-after-free vulnerability was found in the virtio-net device of QEMU. It could occur when the descriptor's address belongs to the non direct access region, due to numbuffers being set after the virtqueue elem has been unmapped. A malicious guest could use this flaw to crash QEMU, resulting i...

GSD-2021-1001872 kunit: fix reference count leak in kfree_at_end

kunit: fix reference count leak in kfreeatend This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.15 by commit...

GSD-2021-1001839 mm, slub: fix mismatch between reconstructed freelist depth and cnt

mm, slub: fix mismatch between reconstructed freelist depth and cnt This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.76 by commit...

PT-2021-30314

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 5.10.50 through 5.10.75 Description The issue is related to the powerpc/smp component, specifically concerning the handling of the idle task preempt count during CPU offline operations. The actual impact and potential for...

PT-2021-30337

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to 5.14.15 Description A reference count leak was discovered in the kfree at end function of the Linux Kernel. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2021-30339

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.14.15 Description The issue is related to a mismatch between reconstructed freelist depth and count in the slub allocator. The actual impact and attack plausibility have not yet been proven. Recommendations Fo...

PT-2021-26319

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 5.10.50 through 5.10.75 Description: The issue is related to the powerpc/smp component, specifically concerning the handling of the idle task preempt count during CPU offline operations. The actual impact and potential f...

PT-2021-26359

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.14 through v5.14.14 Description: The issue is related to the powerpc/smp component, specifically concerning the handling of the idle task preempt count during CPU offline operations. The actual impact and potential fo...

PT-2021-26342

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.14.15 Description: A reference count leak was discovered in the kfree at end function of the Linux Kernel. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

CVE-2021-1949

Possible integer overflow due to improper check of batch count value while sanitizer is enabled in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wearables...

Integer overflow

Possible integer overflow due to improper check of batch count value while sanitizer is enabled in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wearables...

Buffer overflow

Possible buffer out of bound read can occur due to improper validation of TBTT count and length while parsing the beacon response in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity...

CVE-2021-1949

Possible integer overflow due to improper check of batch count value while sanitizer is enabled in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wearables...