Lucene search
+L

7330 matches found

OSV
OSV
added 2021/05/14 8:15 p.m.23 views

PYSEC-2021-530

TensorFlow is an end-to-end open source platform for machine learning. The implementation of the DepthwiseConv TFLite operator is vulnerable to a division by zero...

5.5CVSS0.5AI score0.00189EPSS
SaveExploits1References2
Prion
Prion
added 2021/05/14 8:15 p.m.30 views

Integer overflow

TensorFlow is an end-to-end open source platform for machine learning. An attacker can trigger a denial of service via a CHECK-fail in caused by an integer overflow in constructing a new tensor shape. This is because the...

2.1CVSS5.4AI score0.00189EPSS
SaveExploits1References2Affected Software1
Prion
Prion
added 2021/05/14 8:15 p.m.22 views

Null pointer dereference

TensorFlow is an end-to-end open source platform for machine learning. The implementation of tf.rawops.MaxPool3DGradGrad exhibits undefined behavior by dereferencing null pointers backing attacker-supplied empty tensors. The...

4.6CVSS7.5AI score0.00201EPSS
SaveExploits1References2Affected Software1
Prion
Prion
added 2021/05/14 8:15 p.m.11 views

Design/Logic Flaw

TensorFlow is an end-to-end open source platform for machine learning. Optimized pooling implementations in TFLite fail to check that the stride arguments are not 0 before calling...

4.6CVSS7.5AI score0.00201EPSS
SaveExploits1References2Affected Software1
Prion
Prion
added 2021/05/14 8:15 p.m.26 views

Design/Logic Flaw

TensorFlow is an end-to-end open source platform for machine learning. An attacker can trigger a division by 0 in tf.rawops.QuantizedConv2D. This is because the...

2.1CVSS5.4AI score0.00189EPSS
SaveExploits1References2Affected Software1
Prion
Prion
added 2021/05/14 8:15 p.m.19 views

Code injection

TensorFlow is an end-to-end open source platform for machine learning. Passing invalid arguments e.g., discovered via fuzzing to tf.rawops.SparseCountSparseOutput results in segfault. The fix will be included in TensorFlow 2.5.0. We will also cherrypick this commit on TensorFlow 2.4.2, TensorFlow...

2.1CVSS5.4AI score0.00194EPSS
SaveExploits1References2Affected Software1
Prion
Prion
added 2021/05/14 8:15 p.m.18 views

Design/Logic Flaw

TensorFlow is an end-to-end open source platform for machine learning. An attacker can cause a denial of service via a FPE runtime error in tf.rawops.Reverse. This is because the...

2.1CVSS5.3AI score0.00189EPSS
SaveExploits1References2Affected Software1
Prion
Prion
added 2021/05/14 8:15 p.m.19 views

Code injection

TensorFlow is an end-to-end open source platform for machine learning. An attacker can cause a denial of service by exploiting a CHECK-failure coming from the implementation of tf.rawops.RFFT. Eigen code operating on an empty matrix can trigger on an assertion and will cause program termination...

2.1CVSS5.5AI score0.00189EPSS
SaveExploits1References2Affected Software1
Prion
Prion
added 2021/05/14 8:15 p.m.13 views

Design/Logic Flaw

TensorFlow is an end-to-end open source platform for machine learning. An attacker can cause a runtime division by zero error and denial of service in tf.rawops.QuantizedBatchNormWithGlobalNormalization. This is because the...

2.1CVSS5.4AI score0.00189EPSS
SaveExploits1References2Affected Software1
Prion
Prion
added 2021/05/14 8:15 p.m.29 views

Design/Logic Flaw

TensorFlow is an end-to-end open source platform for machine learning. The implementation of MatrixDiag operationshttps://github.com/tensorflow/tensorflow/blob/4c4f420e68f1cfaf8f4b6e8e3eb857e9e4c3ff33/tensorflow/core/kernels/linalg/matrixdiagop.ccL195-L197 does not validate that the tensor...

4.6CVSS7.6AI score0.00201EPSS
SaveExploits1References2Affected Software1
Prion
Prion
added 2021/05/14 8:15 p.m.22 views

Design/Logic Flaw

TensorFlow is an end-to-end open source platform for machine learning. The validation in tf.rawops.QuantizeAndDequantizeV2 allows invalid values for axis argument:. The...

4.6CVSS7.5AI score0.00201EPSS
SaveExploits1References2Affected Software1
OSV
OSV
added 2021/05/14 8:15 p.m.23 views

PYSEC-2021-449

TensorFlow is an end-to-end open source platform for machine learning. Specifying a negative dense shape in tf.rawops.SparseCountSparseOutput results in a segmentation fault being thrown out from the standard library as std::vector invariants are broken. This is because the...

5.5CVSS2.5AI score0.00189EPSS
SaveExploits1References2
OSV
OSV
added 2021/05/14 8:15 p.m.25 views

PYSEC-2021-486

TensorFlow is an end-to-end open source platform for machine learning. An attacker can cause a heap buffer overflow in tf.rawops.SparseSplit. This is because the...

7.8CVSS0.8AI score0.00211EPSS
SaveExploits1References2
OSV
OSV
added 2021/05/14 8:15 p.m.24 views

PYSEC-2021-526

TensorFlow is an end-to-end open source platform for machine learning. The implementation of the SVDF TFLite operator is vulnerable to a division by zero errorhttps://github.com/tensorflow/tensorflow/blob/7f283ff806b2031f407db64c4d3edcda8fb9f9f5/tensorflow/lite/kernels/svdf.ccL99-L102. An attacke...

7.8CVSS0.8AI score0.00201EPSS
SaveExploits1References2
OSV
OSV
added 2021/05/14 8:15 p.m.23 views

PYSEC-2021-544

TensorFlow is an end-to-end open source platform for machine learning. The implementation of TrySimplifyhttps://github.com/tensorflow/tensorflow/blob/c22d88d6ff33031aa113e48aa3fc9aa74ed79595/tensorflow/core/grappler/optimizers/arithmeticoptimizer.ccL390-L401 has undefined behavior due to...

7.8CVSS5.3AI score0.00206EPSS
SaveExploits1References2
OSV
OSV
added 2021/05/14 8:15 p.m.33 views

PYSEC-2021-541

TensorFlow is an end-to-end open source platform for machine learning. Incomplete validation in tf.rawops.CTCLoss allows an attacker to trigger an OOB read from heap. The fix will be included in TensorFlow 2.5.0. We will also cherrypick these commits on TensorFlow 2.4.2, TensorFlow 2.3.3,...

7.1CVSS1.9AI score0.0024EPSS
SaveExploits1References3
OSV
OSV
added 2021/05/14 8:15 p.m.30 views

PYSEC-2021-528

TensorFlow is an end-to-end open source platform for machine learning. The implementation of the OneHot TFLite operator is vulnerable to a division by zero errorhttps://github.com/tensorflow/tensorflow/blob/f61c57bd425878be108ec787f4d96390579fb83e/tensorflow/lite/kernels/onehot.ccL68-L72. An...

7.8CVSS0.8AI score0.00201EPSS
SaveExploits1References2
OSV
OSV
added 2021/05/14 8:15 p.m.26 views

PYSEC-2021-446

TensorFlow is an end-to-end open source platform for machine learning. In eager mode default in TF 2.0 and later, session operations are invalid. However, users could still call the raw ops associated with them and trigger a null pointer dereference. The...

7.8CVSS0.2AI score0.00201EPSS
SaveExploits1References2
OSV
OSV
added 2021/05/14 8:15 p.m.23 views

PYSEC-2021-475

TensorFlow is an end-to-end open source platform for machine learning. An attacker can cause a segfault and denial of service via accessing data outside of bounds in tf.rawops.QuantizedBatchNormWithGlobalNormalization. This is because the...

5.5CVSS2.8AI score0.00189EPSS
SaveExploits1References2
OSV
OSV
added 2021/05/14 8:15 p.m.22 views

PYSEC-2021-457

TensorFlow is an end-to-end open source platform for machine learning. An attacker can trigger a heap buffer overflow in tf.rawops.QuantizedResizeBilinear by manipulating input values so that float rounding results in off-by-one error in accessing image elements. This is because the...

7.8CVSS0.1AI score0.00251EPSS
SaveExploits1References2
Rows per page
Query Builder