83 matches found
CVE-2024-36734
The deep learning framework Oneflow (version v0.9.1 ) is vulnerable to a Denial of Service (DoS) attack due to improper input validation . An attacker can trigger this condition by providing a negative value into the dim parameter. As a temporary workaround, users should validate input to ensure ...
CVE-2024-36734: Improper Input Validation
Improper input validation in OneFlow-Inc. Oneflow v0.9.1 allows attackers to cause a Denial of Service DoS via inputting a negative value into the dim parameter...
BIT-TENSORFLOW-2022-21728 Out of bounds read in Tensorflow
Tensorflow is an Open Source Machine Learning Framework. The implementation of shape inference for ReverseSequence does not fully validate the value of batchdim and can result in a heap OOB read. There is a check to make sure the value of batchdim does not go over the rank of the input, but there...
CVE-2023-41295
Vulnerability of improper permission management in the displayengine module. Successful exploitation of this vulnerability may cause the screen to turn dim...
Input validation
Vulnerability of improper permission management in the displayengine module. Successful exploitation of this vulnerability may cause the screen to turn dim...
CVE-2023-41295
Vulnerability of improper permission management in the displayengine module. Successful exploitation of this vulnerability may cause the screen to turn dim...
PT-2023-5564 · Huawei · Harmonyos
Name of the Vulnerable Software and Affected Versions: HarmonyOS affected versions not specified Description: The issue is related to improper permission management in the displayengine module of the HarmonyOS operating system. Successful exploitation of this vulnerability may cause the screen to...
dim-elicit.fr Cross Site Scripting vulnerability OBB-3319423
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
SUSE CVE-2022-21731
Tensorflow is an Open Source Machine Learning Framework. The implementation of shape inference for ConcatV2 can be used to trigger a denial of service attack via a segfault caused by a type confusion. The axis argument is translated into concatdim in the ConcatShapeHelper helper function. Then, a...
GSD-2022-1004729 linux/dim: Fix divide by 0 in RDMA DIM
linux/dim: Fix divide by 0 in RDMA DIM This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.204 by commit...
GSD-2022-1004607 linux/dim: Fix divide by 0 in RDMA DIM
linux/dim: Fix divide by 0 in RDMA DIM This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.129 by commit...
GSD-2022-1004443 linux/dim: Fix divide by 0 in RDMA DIM
linux/dim: Fix divide by 0 in RDMA DIM This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.53 by commit...
GSD-2022-1004233 linux/dim: Fix divide by 0 in RDMA DIM
linux/dim: Fix divide by 0 in RDMA DIM This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.10 by commit...
Google TensorFlow buffer overflow vulnerability (CNVD-2022-11507)
Google TensorFlow is an end-to-end open source platform for machine learning from Google Google. Google Tensorflow has a buffer overflow vulnerability, which stems from the implementation of ReverseSequence's shape inference does not fully validate the value of batch dim, and an attacker can...
dim-penthouse.if.ua Cross Site Scripting vulnerability OBB-2326266
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
GHSA-CQ76-MXRC-VCHH Crash in `tf.math.segment_*` operations
Impact The implementation of tf.math.segment operations results in a CHECK-fail related abort and denial of service if a segment id in segmentids is large. python import tensorflow as tf tf.math.segmentmaxdata=np.ones1,10,1, segmentids=1676240524292489355 tf.math.segmentmindata=np.ones1,10,1,...
PYSEC-2021-842
TensorFlow is an open source platform for machine learning. In affected versions the implementation of tf.math.segment operations results in a CHECK-fail related abort and denial of service if a segment id in segmentids is large. This is similar to CVE-2021-29584 and similar other reported...
CVE-2019-20033
On Aspire-derived NEC PBXes, including all versions of SV8100 devices, a set of documented, static login credentials may be used to access the DIM interface...
