Lucene search
+L

3137 matches found

OSV
OSV
added 2021/05/14 8:15 p.m.22 views

PYSEC-2021-469

TensorFlow is an end-to-end open source platform for machine learning. An attacker can trigger a dereference of a null pointer in tf.rawops.StringNGrams. This is because the...

5.5CVSS0.5AI score0.00189EPSS
SaveExploits1References2
OSV
OSV
added 2021/05/14 8:15 p.m.22 views

PYSEC-2021-442

TensorFlow is an end-to-end open source platform for machine learning. If the splits argument of RaggedBincount does not specify a valid SparseTensorhttps://www.tensorflow.org/apidocs/python/tf/sparse/SparseTensor, then an attacker can trigger a heap buffer overflow. This will cause a read from...

7.8CVSS0.7AI score0.00211EPSS
SaveExploits1References2
OSV
OSV
added 2021/05/14 8:15 p.m.27 views

PYSEC-2021-453

TensorFlow is an end-to-end open source platform for machine learning. An attacker can trigger a division by 0 in tf.rawops.Conv2DBackpropInput. This is because the...

7.8CVSS1AI score0.00201EPSS
SaveExploits1References2
OSV
OSV
added 2021/05/14 8:15 p.m.25 views

PYSEC-2021-476

TensorFlow is an end-to-end open source platform for machine learning. An attacker can cause a runtime division by zero error and denial of service in tf.rawops.QuantizedBatchNormWithGlobalNormalization. This is because the...

5.5CVSS1.6AI score0.00189EPSS
SaveExploits1References2
OSV
OSV
added 2021/05/14 8:15 p.m.21 views

PYSEC-2021-472

TensorFlow is an end-to-end open source platform for machine learning. An attacker can trigger a denial of service via a CHECK-fail in tf.rawops.QuantizeAndDequantizeV4Grad. This is because the...

5.5CVSS3.3AI score0.0031EPSS
SaveExploits1References2
OSV
OSV
added 2021/05/14 8:15 p.m.25 views

PYSEC-2021-467

TensorFlow is an end-to-end open source platform for machine learning. Calling tf.rawops.ImmutableConsthttps://www.tensorflow.org/apidocs/python/tf/rawops/ImmutableConst with a dtype of tf.resource or tf.variant results in a segfault in the implementation as code assumes that the tensor contents...

5.5CVSS1.4AI score0.00189EPSS
SaveExploits1References2
OSV
OSV
added 2021/05/14 8:15 p.m.21 views

PYSEC-2021-487

TensorFlow is an end-to-end open source platform for machine learning. An attacker can access data outside of bounds of heap allocated array in tf.rawops.UnicodeEncode. This is because the...

7.1CVSS1.3AI score0.00198EPSS
SaveExploits1References2
OSV
OSV
added 2021/05/14 8:15 p.m.19 views

PYSEC-2021-455

TensorFlow is an end-to-end open source platform for machine learning. An attacker can trigger a division by 0 in tf.rawops.QuantizedConv2D. This is because the...

5.5CVSS1AI score0.00189EPSS
SaveExploits1References2
OSV
OSV
added 2021/05/14 8:15 p.m.13 views

PYSEC-2021-527

TensorFlow is an end-to-end open source platform for machine learning. The implementation of the Split TFLite operator is vulnerable to a division by zero errorhttps://github.com/tensorflow/tensorflow/blob/e2752089ef7ce9bcf3db0ec618ebd23ea119d0c7/tensorflow/lite/kernels/split.ccL63-L65. An attack...

7.8CVSS0.9AI score0.00209EPSS
SaveExploits1References2
Prion
Prion
added 2021/05/14 8:15 p.m.17 views

Design/Logic Flaw

TensorFlow is an end-to-end open source platform for machine learning. An attacker can trigger a denial of service via a CHECK-fail in tf.rawops.CTCGreedyDecoder. This is because the...

2.1CVSS5.3AI score0.00189EPSS
SaveExploits1References2Affected Software1
Prion
Prion
added 2021/05/14 8:15 p.m.18 views

Out-of-bounds

TensorFlow is an end-to-end open source platform for machine learning. Due to lack of validation in tf.rawops.Dequantize, an attacker can trigger a read from outside of bounds of heap allocated data. The...

3.6CVSS6.8AI score0.00198EPSS
SaveExploits1References2Affected Software1
Prion
Prion
added 2021/05/14 8:15 p.m.29 views

Heap overflow

TensorFlow is an end-to-end open source platform for machine learning. Missing validation between arguments to tf.rawops.Conv3DBackprop operations can result in heap buffer overflows. This is because the...

4.6CVSS7.7AI score0.00224EPSS
SaveExploits1References2Affected Software1
Prion
Prion
added 2021/05/14 8:15 p.m.40 views

Design/Logic Flaw

TensorFlow is an end-to-end open source platform for machine learning. The implementation of the SVDF TFLite operator is vulnerable to a division by zero errorhttps://github.com/tensorflow/tensorflow/blob/7f283ff806b2031f407db64c4d3edcda8fb9f9f5/tensorflow/lite/kernels/svdf.ccL99-L102. An attacke...

4.6CVSS7.5AI score0.00201EPSS
SaveExploits1References2Affected Software1
Prion
Prion
added 2021/05/14 8:15 p.m.17 views

Out-of-bounds

TensorFlow is an end-to-end open source platform for machine learning. An attacker can force accesses outside the bounds of heap allocated arrays by passing in invalid tensor values to tf.rawops.RaggedCross. This is because the...

3.6CVSS6.8AI score0.00198EPSS
SaveExploits1References2Affected Software1
Prion
Prion
added 2021/05/14 8:15 p.m.24 views

Design/Logic Flaw

TensorFlow is an end-to-end open source platform for machine learning. Specifying a negative dense shape in tf.rawops.SparseCountSparseOutput results in a segmentation fault being thrown out from the standard library as std::vector invariants are broken. This is because the...

2.1CVSS5.3AI score0.00189EPSS
SaveExploits1References2Affected Software1
Prion
Prion
added 2021/05/14 8:15 p.m.20 views

Input validation

TensorFlow is an end-to-end open source platform for machine learning. Incomplete validation in SparseReshape results in a denial of service based on a CHECK-failure. The...

2.1CVSS5.4AI score0.00202EPSS
SaveExploits1References2Affected Software1
Prion
Prion
added 2021/05/14 8:15 p.m.20 views

Design/Logic Flaw

TensorFlow is an end-to-end open source platform for machine learning. An attacker can trigger a denial of service via a CHECK-fail in tf.rawops.SparseConcat. This is because the...

2.1CVSS5.3AI score0.00189EPSS
SaveExploits1References2Affected Software1
Prion
Prion
added 2021/05/14 8:15 p.m.25 views

Design/Logic Flaw

TensorFlow is an end-to-end open source platform for machine learning. Incomplete validation in tf.rawops.CTCLoss allows an attacker to trigger an OOB read from heap. The fix will be included in TensorFlow 2.5.0. We will also cherrypick these commits on TensorFlow 2.4.2, TensorFlow 2.3.3,...

3.6CVSS6.7AI score0.0024EPSS
SaveExploits1References3Affected Software1
Prion
Prion
added 2021/05/14 8:15 p.m.21 views

Null pointer dereference

TensorFlow is an end-to-end open source platform for machine learning. An attacker can trigger a null pointer dereference in the implementation of tf.rawops.EditDistance. This is because the...

2.1CVSS5.5AI score0.00189EPSS
SaveExploits1References2Affected Software1
Prion
Prion
added 2021/05/14 8:15 p.m.18 views

Out-of-bounds

TensorFlow is an end-to-end open source platform for machine learning. An attacker can write outside the bounds of heap allocated arrays by passing invalid arguments to tf.rawops.Dilation2DBackpropInput. This is because the...

4.6CVSS7.6AI score0.00201EPSS
SaveExploits1References2Affected Software1
Rows per page
Query Builder