Lucene search
+L

201 matches found

NVD
NVD
•added 2021/11/05 9:15 p.m.•52 views

CVE-2021-41204

TensorFlow is an open source platform for machine learning. In affected versions during TensorFlow's Grappler optimizer phase, constant folding might attempt to deep copy a resource tensor. This results in a segfault, as these tensors are supposed to not change. The fix will be included in...

5.5CVSS0.00141EPSS
SaveExploits0References2
PyPA
PyPA
•added 2021/11/05 9:15 p.m.•13 views

PYSEC-2021-812

TensorFlow is an open source platform for machine learning. In affected versions during TensorFlow's Grappler optimizer phase, constant folding might attempt to deep copy a resource tensor. This results in a segfault, as these tensors are supposed to not change. The fix will be included in...

5.5CVSS6.9AI score0.00141EPSS
SaveExploits0References2Affected Software1
PyPA
PyPA
•added 2021/11/05 9:15 p.m.•13 views

PYSEC-2021-614

TensorFlow is an open source platform for machine learning. In affected versions during TensorFlow's Grappler optimizer phase, constant folding might attempt to deep copy a resource tensor. This results in a segfault, as these tensors are supposed to not change. The fix will be included in...

5.5CVSS6.9AI score0.00141EPSS
SaveExploits0References2Affected Software1
OSV
OSV
•added 2021/11/05 9:15 p.m.•12 views

PYSEC-2021-812

TensorFlow is an open source platform for machine learning. In affected versions during TensorFlow's Grappler optimizer phase, constant folding might attempt to deep copy a resource tensor. This results in a segfault, as these tensors are supposed to not change. The fix will be included in...

5.5CVSS5.9AI score0.00141EPSS
SaveExploits0References2
OSV
OSV
•added 2021/11/05 9:15 p.m.•20 views

PYSEC-2021-614

TensorFlow is an open source platform for machine learning. In affected versions during TensorFlow's Grappler optimizer phase, constant folding might attempt to deep copy a resource tensor. This results in a segfault, as these tensors are supposed to not change. The fix will be included in...

5.5CVSS2AI score0.00141EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2021/11/05 9:15 p.m.•11 views

CVE-2021-41204

TensorFlow is an open source platform for machine learning. In affected versions during TensorFlow's Grappler optimizer phase, constant folding might attempt to deep copy a resource tensor. This results in a segfault, as these tensors are supposed to not change. The fix will be included in...

5.5CVSS6AI score0.00141EPSS
SaveExploits0References3Affected Software1
Prion
Prion
•added 2021/11/05 9:15 p.m.•32 views

Stack overflow

TensorFlow is an open source platform for machine learning. In affected versions during TensorFlow's Grappler optimizer phase, constant folding might attempt to deep copy a resource tensor. This results in a segfault, as these tensors are supposed to not change. The fix will be included in...

2.1CVSS5.5AI score0.00141EPSS
SaveExploits0References2Affected Software1
PyPA
PyPA
•added 2021/11/05 9:15 p.m.•14 views

PYSEC-2021-397

TensorFlow is an open source platform for machine learning. In affected versions during TensorFlow's Grappler optimizer phase, constant folding might attempt to deep copy a resource tensor. This results in a segfault, as these tensors are supposed to not change. The fix will be included in...

5.5CVSS6.9AI score0.00141EPSS
SaveExploits0References2Affected Software1
OSV
OSV
•added 2021/11/05 9:15 p.m.•15 views

PYSEC-2021-397

TensorFlow is an open source platform for machine learning. In affected versions during TensorFlow's Grappler optimizer phase, constant folding might attempt to deep copy a resource tensor. This results in a segfault, as these tensors are supposed to not change. The fix will be included in...

5.5CVSS6.1AI score0.00141EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2021/11/05 8:45 p.m.•50 views

CVE-2021-41204 Segfault while copying constant resource tensor

TensorFlow is an open source platform for machine learning. In affected versions during TensorFlow's Grappler optimizer phase, constant folding might attempt to deep copy a resource tensor. This results in a segfault, as these tensors are supposed to not change. The fix will be included in...

5.5CVSS5.6AI score0.00141EPSS
SaveExploits0References2
Mend
Mend
•added 2021/11/05 8:45 p.m.•2 views

CVE-2021-41204

TensorFlow is an open source platform for machine learning. In affected versions during TensorFlow's Grappler optimizer phase, constant folding might attempt to deep copy a resource tensor. This results in a segfault, as these tensors are supposed to not change. The fix will be included in...

6.8CVSS0.00141EPSS
SaveExploits0References7
Debian CVE
Debian CVE
•added 2021/11/05 8:45 p.m.•19 views

CVE-2021-41204

TensorFlow is an open source platform for machine learning. In affected versions during TensorFlow's Grappler optimizer phase, constant folding might attempt to deep copy a resource tensor. This results in a segfault, as these tensors are supposed to not change. The fix will be included in...

5.5CVSS6.9AI score0.00141EPSS
SaveExploits0
CVE
CVE
•added 2021/11/05 8:45 p.m.•110 views

CVE-2021-41204

CVE-2021-41204 concerns TensorFlow. In affected builds, during Grappler optimizer constant folding, a deep copy of a resource tensor may be attempted, causing a segfault because such tensors should not change. The issue is addressed with a fix in TensorFlow 2.7.0, and a cherry-pick was applied to...

5.5CVSS5.5AI score0.00141EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/11/05 12:00 a.m.•6 views

CVE-2021-41225: Use of Uninitialized Resource

TensorFlow is an open source platform for machine learning. In affected versions TensorFlow's Grappler optimizer has a use of unitialized variable. If the trainnodes vector obtained from the saved model that gets optimized does not contain a Dequeue node, then dequeuenode is left unitialized. The...

7.8CVSS5.7AI score0.00196EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2021/11/05 12:00 a.m.•11 views

PT-2021-23176 · Google · Tensorflow

Name of the Vulnerable Software and Affected Versions: TensorFlow versions prior to 2.7.0 TensorFlow versions 2.6.1 and earlier TensorFlow versions 2.5.2 and earlier TensorFlow versions 2.4.4 and earlier Description: The issue occurs during TensorFlow's Grappler optimizer phase, where constant...

6.8CVSS5.2AI score0.00141EPSS
SaveExploits0References13
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/11/05 12:00 a.m.•4 views

CVE-2021-41204: Access of Uninitialized Pointer

TensorFlow is an open source platform for machine learning. In affected versions during TensorFlow's Grappler optimizer phase, constant folding might attempt to deep copy a resource tensor. This results in a segfault, as these tensors are supposed to not change. The fix will be included in...

5.5CVSS5.7AI score0.00141EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2021/11/05 12:00 a.m.•25 views

Google TensorFlow 安全漏洞

A security vulnerability in Google TensorFlow, an end-to-end open source platform for machine learning from Google, stems from the use of uninitialized variables in the Grappler optimizer. If the trainnodes vector obtained from the saved optimization model does not contain Dequeue nodes, then...

7.8CVSS5.5AI score0.00196EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2021/11/05 12:00 a.m.•18 views

PT-2021-23198 · Google · Tensorflow

Name of the Vulnerable Software and Affected Versions: TensorFlow versions prior to 2.7.0 TensorFlow version 2.6.1 TensorFlow version 2.5.2 TensorFlow version 2.4.4 Description: TensorFlow's Grappler optimizer has a use of an uninitialized variable. If the train nodes vector does not contain a...

7.8CVSS7.4AI score0.00196EPSS
SaveExploits1References14
OSV
OSV
•added 2021/05/21 2:28 p.m.•11 views

GHSA-4HVV-7X94-7VQ8 Null dereference in Grappler's `TrySimplify`

Impact The implementation of TrySimplify has undefined behavior due to dereferencing a null pointer in corner cases that result in optimizing a node with no inputs. Patches We have patched the issue in GitHub commit e6340f0665d53716ef3197ada88936c2a5f7a2d3. The fix will be included in TensorFlow...

2.5CVSS5.9AI score0.00206EPSS
SaveExploits1References7
Github Security Blog
Github Security Blog
•added 2021/05/21 2:28 p.m.•62 views

Null dereference in Grappler's `TrySimplify`

Impact The implementation of TrySimplify has undefined behavior due to dereferencing a null pointer in corner cases that result in optimizing a node with no inputs. Patches We have patched the issue in GitHub commit e6340f0665d53716ef3197ada88936c2a5f7a2d3. The fix will be included in TensorFlow...

7.8CVSS1.9AI score0.00206EPSS
SaveExploits1References7Affected Software3
Rows per page
Query Builder