Lucene search
+L

3137 matches found

OSV
OSV
added 2021/05/14 8:15 p.m.18 views

PYSEC-2021-471

TensorFlow is an end-to-end open source platform for machine learning. An attacker can trigger a denial of service via a CHECK-fail in tf.rawops.CTCGreedyDecoder. This is because the...

5.5CVSS1.3AI score0.00189EPSS
SaveExploits1References2
OSV
OSV
added 2021/05/14 8:15 p.m.21 views

PYSEC-2021-487

TensorFlow is an end-to-end open source platform for machine learning. An attacker can access data outside of bounds of heap allocated array in tf.rawops.UnicodeEncode. This is because the...

7.1CVSS1.3AI score0.00198EPSS
SaveExploits1References2
Prion
Prion
added 2021/05/14 8:15 p.m.17 views

Heap overflow

TensorFlow is an end-to-end open source platform for machine learning. The implementation of tf.rawops.MaxPoolGrad is vulnerable to a heap buffer overflow. The...

4.6CVSS5.8AI score0.00214EPSS
SaveExploits1References2Affected Software1
Prion
Prion
added 2021/05/14 8:15 p.m.17 views

Integer overflow

TensorFlow is an end-to-end open source platform for machine learning. The TFLite code for allocating TFLiteIntArrays is vulnerable to an integer overflow issuehttps://github.com/tensorflow/tensorflow/blob/4ceffae632721e52bf3501b736e4fe9d1221cdfa/tensorflow/lite/c/common.cL24-L27. An attacker can...

2.1CVSS5.6AI score0.0022EPSS
SaveExploits1References2Affected Software1
OSV
OSV
added 2021/05/14 8:15 p.m.18 views

PYSEC-2021-501

TensorFlow is an end-to-end open source platform for machine learning. The implementation of tf.rawops.MaxPoolGradWithArgmax is vulnerable to a division by 0. The...

5.5CVSS0.8AI score0.00189EPSS
SaveExploits1References2
OSV
OSV
added 2021/05/14 8:15 p.m.24 views

PYSEC-2021-470

TensorFlow is an end-to-end open source platform for machine learning. An attacker can cause a heap buffer overflow by passing crafted inputs to tf.rawops.StringNGrams. This is because the...

5.5CVSS0.6AI score0.00198EPSS
SaveExploits1References2
OSV
OSV
added 2021/05/14 8:15 p.m.24 views

PYSEC-2021-461

TensorFlow is an end-to-end open source platform for machine learning. An attacker can trigger a denial of service via a CHECK failure by passing an empty image to tf.rawops.DrawBoundingBoxes. This is because the...

5.5CVSS0.5AI score0.00217EPSS
SaveExploits1References2
OSV
OSV
added 2021/05/14 8:15 p.m.29 views

PYSEC-2021-494

TensorFlow is an end-to-end open source platform for machine learning. An attacker can write outside the bounds of heap allocated arrays by passing invalid arguments to tf.rawops.Dilation2DBackpropInput. This is because the...

7.8CVSS0.1AI score0.00201EPSS
SaveExploits1References2
Prion
Prion
added 2021/05/14 8:15 p.m.24 views

Design/Logic Flaw

TensorFlow is an end-to-end open source platform for machine learning. The Prepare step of the SpaceToDepth TFLite operator does not check for 0 before divisionhttps://github.com/tensorflow/tensorflow/blob/5f7975d09eac0f10ed8a17dbb6f5964977725adc/tensorflow/lite/kernels/spacetodepth.ccL63-L67. An...

4.6CVSS7.5AI score0.00201EPSS
SaveExploits1References2Affected Software1
Prion
Prion
added 2021/05/14 8:15 p.m.17 views

Design/Logic Flaw

TensorFlow is an end-to-end open source platform for machine learning. An attacker can trigger a denial of service via a CHECK-fail in tf.rawops.CTCGreedyDecoder. This is because the...

2.1CVSS5.3AI score0.00189EPSS
SaveExploits1References2Affected Software1
Prion
Prion
added 2021/05/14 8:15 p.m.18 views

Out-of-bounds

TensorFlow is an end-to-end open source platform for machine learning. Due to lack of validation in tf.rawops.Dequantize, an attacker can trigger a read from outside of bounds of heap allocated data. The...

3.6CVSS6.8AI score0.00198EPSS
SaveExploits1References2Affected Software1
Prion
Prion
added 2021/05/14 8:15 p.m.17 views

Out-of-bounds

TensorFlow is an end-to-end open source platform for machine learning. An attacker can force accesses outside the bounds of heap allocated arrays by passing in invalid tensor values to tf.rawops.RaggedCross. This is because the...

3.6CVSS6.8AI score0.00198EPSS
SaveExploits1References2Affected Software1
Prion
Prion
added 2021/05/14 8:15 p.m.20 views

Design/Logic Flaw

TensorFlow is an end-to-end open source platform for machine learning. An attacker can trigger a denial of service via a CHECK-fail in tf.rawops.SparseConcat. This is because the...

2.1CVSS5.3AI score0.00189EPSS
SaveExploits1References2Affected Software1
Prion
Prion
added 2021/05/14 8:15 p.m.25 views

Design/Logic Flaw

TensorFlow is an end-to-end open source platform for machine learning. Incomplete validation in tf.rawops.CTCLoss allows an attacker to trigger an OOB read from heap. The fix will be included in TensorFlow 2.5.0. We will also cherrypick these commits on TensorFlow 2.4.2, TensorFlow 2.3.3,...

3.6CVSS6.7AI score0.0024EPSS
SaveExploits1References3Affected Software1
Prion
Prion
added 2021/05/14 8:15 p.m.21 views

Null pointer dereference

TensorFlow is an end-to-end open source platform for machine learning. An attacker can trigger a null pointer dereference in the implementation of tf.rawops.EditDistance. This is because the...

2.1CVSS5.5AI score0.00189EPSS
SaveExploits1References2Affected Software1
Prion
Prion
added 2021/05/14 8:15 p.m.13 views

Heap overflow

TensorFlow is an end-to-end open source platform for machine learning. An attacker can cause a heap buffer overflow in QuantizedResizeBilinear by passing in invalid thresholds for the quantization. This is because the...

4.6CVSS7.7AI score0.00211EPSS
SaveExploits1References2Affected Software1
Prion
Prion
added 2021/05/14 8:15 p.m.54 views

Design/Logic Flaw

TensorFlow is an end-to-end open source platform for machine learning. An attacker can trigger a division by 0 in tf.rawops.QuantizedMul. This is because the...

2.1CVSS5.4AI score0.00189EPSS
SaveExploits1References2Affected Software1
Prion
Prion
added 2021/05/14 8:15 p.m.16 views

Design/Logic Flaw

TensorFlow is an end-to-end open source platform for machine learning. The implementation of tf.rawops.MaxPoolGradWithArgmax is vulnerable to a division by 0. The...

2.1CVSS5.3AI score0.00189EPSS
SaveExploits1References2Affected Software1
Prion
Prion
added 2021/05/14 8:15 p.m.26 views

Code injection

TensorFlow is an end-to-end open source platform for machine learning. An attacker can cause a runtime division by zero error and denial of service in tf.rawops.FractionalAvgPool. This is because the...

2.1CVSS5.3AI score0.00189EPSS
SaveExploits1References2Affected Software1
Prion
Prion
added 2021/05/14 8:15 p.m.16 views

Design/Logic Flaw

TensorFlow is an end-to-end open source platform for machine learning. An attacker can trigger a denial of service via a CHECK-fail in tf.rawops.QuantizeAndDequantizeV4Grad. This is because the...

2.1CVSS5.3AI score0.0031EPSS
SaveExploits1References2Affected Software1
Rows per page
Query Builder