CVE-2021-37688

TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can craft a TFLite model that would trigger a null pointer dereference, which would result in a crash and denial of service. The implementation unconditionally dereferences a pointer. We have...

azureml-designer-recommender-modules (>=0.0.1, <=0.0.9), d3m-simon (1.2.5) +23 more potentially affected by CVE-2021-37688 via tensorflow-gpu (>=2.0.0, <=2.3.2)

tensorflow-gpu PYPI version =2.0.0, =0.0.1, =1.1.0, =0.1.1, =0.1.0, =0.2.0, =0.6.4, =0.8.2 - maupassant 0.1.1 - mlreflect 0.16.0 - monk-cuda100 0.0.1 - monk-cuda100-test 0.0.1 - monk-cuda101 0.0.1 - monk-cuda101-test 0.0.1 - monk-keras-cuda100 0.0.1 and more Source cves: CVE-2021-37688 Source...

autogan (0.0.5), deepctr (0.3.3) +8 more potentially affected by CVE-2021-37688 via tensorflow (1.12.3)

tensorflow PYPI version 1.12.3 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - autogan 0.0.5 - deepctr 0.3.3 - opveclib 1.0.0 - polyaxon-lib =0.0.3, =0.14.0a5, =0.13.0, =1.0.1, =1.9.1, =0.1.0, =0.3.1 Source cves:...

adpred (>=1.1.2, <=1.2.7), aix360 (>=0.2.0, <=0.2.1) +73 more potentially affected by CVE-2021-37688 via tensorflow (1.14.0)

tensorflow PYPI version 1.14.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - adpred =1.1.2, =0.2.0, =1.0.4, =0.1.1, =1.0.2, =0.0.4, =0.1.0, =0.92.0, =0.12.0, =0.22.0 and more Source cves: CVE-2021-37688 Source...

alphapulldown (>=0.21.2, <=0.22.3), autokeras (1.0.16) +45 more potentially affected by CVE-2021-37688 via tensorflow (2.5.0)

tensorflow PYPI version 2.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - alphapulldown =0.21.2, =1.1.0, =0.8.1, =3.3.0, =0.0.24, =1.0.0, =2.0.2, =0.7.0, =0.3.11, =1.33.0, =1.33.3 and more Source cves: CVE-2021-376...

abmarl (>=0.1.1, <=0.1.3), agrothon (>=1.1.5, <=1.3.2) +82 more potentially affected by CVE-2021-37688 via tensorflow (>=2.4.0, <=2.4.2)

tensorflow PYPI version =2.4.0, =0.1.1, =1.1.5, =2.1.0, =0.0.1, =0.0.6, =0.1.0, =1.4.0, =1.2.2, =20210221.0.0, =0.7.2, =0.7.4 and more Source cves: CVE-2021-37688 Source advisory: GHSA-VCJJ-9VG7-VF68...

alphapulldown (>=0.21.2, <=0.22.3), autokeras (1.0.16) +45 more potentially affected by CVE-2021-37688 via tensorflow (2.5.0)

tensorflow PYPI version 2.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - alphapulldown =0.21.2, =1.1.0, =0.8.1, =3.3.0, =0.0.24, =1.0.0, =2.0.2, =0.7.0, =0.3.11, =1.33.0, =1.33.3 and more Source cves: CVE-2021-376...

asc (>=0.1.0, <=0.3.1), openats (>=0.0.0.dev1, <=0.0.0.dev37) potentially affected by CVE-2021-37688 via tensorflow (1.2.1)

tensorflow PYPI version 1.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - asc =0.1.0, =0.0.0.dev1, =0.0.0.dev37 Source cves: CVE-2021-37688 Source advisory: OSV:GHSA-VCJJ-9VG7-VF68...

cellunet (>=0.1.0, <=0.2.2), color2vec (1.0.0) +12 more potentially affected by CVE-2021-37688 via tensorflow (1.8.0)

tensorflow PYPI version 1.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - cellunet =0.1.0, =0.0.5.1, =0.1.0, =0.1.1.1, =1.1.0, =0.9.0a7, =0.1.0, =0.11.0, =0.4.1, =0.5.2, =0.5.5 Source cves: CVE-2021-37688 Source...

strawberryfields-gpu (>=0.7.3, <=0.10.0) potentially affected by CVE-2021-37688 via tensorflow-gpu (1.6.0)

tensorflow-gpu PYPI version 1.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow-gpu and may be impacted: - strawberryfields-gpu =0.7.3, =0.10.0 Source cves: CVE-2021-37688 Source advisory: OSV:GHSA-VCJJ-9VG7-VF68...

axelerate (>=0.5.2, <=0.5.5), bert-experimental (1.0.0) +24 more potentially affected by CVE-2021-37688 via tensorflow (1.15.2)

tensorflow PYPI version 1.15.2 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - axelerate =0.5.2, =2.0.1, =1.0.1, =0.1.0.dev1, =1.5.0.dev20210429, =1.5.0.dev20210512 - fedlearner-manylinux 1.5.0.dev20210429 -...

axelerate (>=0.5.8, <=0.5.9), bianbu-ai-toolkit-tf1 (1.0.6) +27 more potentially affected by CVE-2021-37688 via tensorflow (1.15.3)

tensorflow PYPI version 1.15.3 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - axelerate =0.5.8, =0.0.1.2, =0.0.13, =1.1.0, =0.22.0, =1.6.0, =4.1.3, =0.10.0.dev1, =0.11.0 - muffnn 2.3.1 - neoepiscope 0.4.0 and more...

accuinsight (>=1.0.47, <=3.0.0), adapt-diagnostics (>=1.2.0, <=1.6.0) +332 more potentially affected by CVE-2021-37688 via tensorflow (>=2.0.0, <=2.3.2)

tensorflow PYPI version =2.0.0, =1.0.47, =1.2.0, =0.0.1, =0.5.6, =0.5.0, =0.1.0, =0.10.0.dev0, =2.0.0b0, =0.5.0, =1.1.0 and more Source cves: CVE-2021-37688 Source advisory: OSV:GHSA-VCJJ-9VG7-VF68...

branchedgp (1.0.0), fate-client (>=0.1.0, <=1.5.3) +9 more potentially affected by CVE-2021-37688 via tensorflow (1.15.4)

tensorflow PYPI version 1.15.4 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - branchedgp 1.0.0 - fate-client =0.1.0, =0.2.2, =0.2.0, =0.2.4, =0.0.5.dev0, =1.5.0, =0.1.6, =0.2.4 Source cves: CVE-2021-37688 Source...

audeep (>=0.9.2, <=0.9.6a1), cryocare (>=0.0.1, <=0.0.2) +17 more potentially affected by CVE-2021-37688 via tensorflow-gpu (1.15.5)

tensorflow-gpu PYPI version 1.15.5 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow-gpu and may be impacted: - audeep =0.9.2, =0.0.1, =0.6.7a1, =0.2.5, =0.1.0, =0.0.1, =0.1.0, =0.1.0, =1.3.0, =0.0.4, =0.1.3, =0.4.0, =0.0.6, =0.0.8 and more...

accuinsight (>=1.0.62, <=3.0.0), adapt-diagnostics (>=1.2.0, <=1.6.0) +95 more potentially affected by CVE-2021-37688 via tensorflow (>=2.3.0, <=2.3.2)

tensorflow PYPI version =2.3.0, =1.0.62, =1.2.0, =0.0.1a0, =0.0.1, =1.0.0rc1, =20210206.0.0, =0.1.0.dev1, =0.2.4, =1.0.1.0, =0.1.0, =2.0.0rc1, =2.0.3 and more Source cves: CVE-2021-37688 Source advisory: OSV:PYSEC-2021-310...

CVE-2021-37688

TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can craft a TFLite model that would trigger a null pointer dereference, which would result in a crash and denial of service. The implementation unconditionally dereferences a pointer. We have...

CVE-2021-37688

CVE-2021-37688 is a TensorFlow/TFLite vulnerability describing a null pointer dereference in TFLite kernels (implemented in optimized_ops.h) that can crash the process and cause denial of service when processing a crafted TFLite model. The issue is a local condition, with the vulnerable path unco...

abba-python (>=0.1.6, <=0.3.0), accuinsight (>=1.0.1, <=3.0.0) +673 more potentially affected by CVE-2021-37688 via tensorflow (>=1.0.1, <=2.3.2)

tensorflow PYPI version =1.0.1, =0.1.6, =1.0.1, =1.2.0, =1.1.2, =0.0.1, =0.3.26, =0.0.1, =0.2.0, =0.3.1, =0.5.0, =0.8.0 and more Source cves: CVE-2021-37688 Source advisory: MEND:CVE-2021-37688...

c4v-py (>=0.1.0.dev1, <=0.1.0.dev202107081840), gamornet-cpu (>=0.2.3, <=0.4.3) +5 more potentially affected by CVE-2021-37688 via tensorflow-cpu (>=1.15.0, <=2.3.1)

tensorflow-cpu PYPI version =1.15.0, =0.1.0.dev1, =0.2.3, =0.5.1, =0.102.0.dev0, =1.5.2, =0.7.0, =0.7.5 Source cves: CVE-2021-37688 Source advisory: MEND:CVE-2021-37688...