GHSA-F8H4-7RGH-Q2GM Segfault and heap buffer overflow in `{Experimental,}DatasetToTFRecord`

Impact The implementation for tf.rawops.ExperimentalDatasetToTFRecord and tf.rawops.DatasetToTFRecord can trigger heap buffer overflow and segmentation fault: python import tensorflow as tf dataset = tf.data.Dataset.range3 dataset = tf.data.experimental.tovariantdataset...

PT-2021-21766 · Google · Tensorflow

Name of the Vulnerable Software and Affected Versions: TensorFlow versions prior to 2.6.0 TensorFlow versions 2.5.1 and earlier TensorFlow versions 2.4.3 and earlier TensorFlow versions 2.3.4 and earlier Description: The implementation for tf.raw ops.ExperimentalDatasetToTFRecord and tf.raw...

CVE-2021-37650: Buffer Copy without Checking Size of Input

TensorFlow is an end-to-end open source platform for machine learning. In affected versions the implementation for tf.rawops.ExperimentalDatasetToTFRecord and tf.rawops.DatasetToTFRecord can trigger heap buffer overflow and segmentation fault. The implementation assumes that all records in the...