Design/Logic Flaw

A WRITE memory access in the AP4NullTerminatedStringAtom::AP4NullTerminatedStringAtom component of Bento4 version 06c39d9 can lead to a segmentation fault...

CVE-2020-23334

A WRITE memory access in the AP4NullTerminatedStringAtom::AP4NullTerminatedStringAtom component of Bento4 version 06c39d9 can lead to a segmentation fault...

CVE-2020-23334

Affected software: Bento4 (open-source C library for MP4 handling). Vulnerable component: AP4_NullTerminatedStringAtom. Root cause: A WRITE memory access in AP4_NullTerminatedStringAtom::AP4_NullTerminatedStringAtom can cause a segmentation fault. Impact: crashes (segmentation fault) reported for...

CVE-2020-23334

A WRITE memory access in the AP4NullTerminatedStringAtom::AP4NullTerminatedStringAtom component of Bento4 version 06c39d9 can lead to a segmentation fault...

Bento4 缓冲区错误漏洞

Bento4 is an open source C library for reading and writing MP4 files.A denial of service vulnerability exists in versions prior to Bento4 1.6.0-635, which stems from a segmentation error in the write memory access of the product AP4NullTerminatedStringAtom::AP4NllTerminated StringAtom component...

Denial Of Service (DoS)

tensorflow is vulnerable to denial of service. A segfault is triggered when invalid arguments are passed as it does not validate for other value but assumes that axis can be either -1 or a value greater than -1...

Denial Of Service (DoS)

tensorflow is vulnerable to denial of service. An attacker can cause a denial of service via a segmentation fault in tf.rawops.MaxPoolGrad due to a lack of validation...

MGASA-2021-0404 Updated glibc packages fix security issue

The recent fix for CVE-2021-33574 released in MGASA-2021-0308 introduced a NULL pointer dereference because mqnotify.c mishandles certain NOTIFYREMOVED data, that will result in segmentation fault. This update adds the missing NULL pointer check to resolve this issue CVE-2021-38604...

Google TensorFlow buffer overflow vulnerability (CNVD-2021-64533)

Google TensorFlow, an end-to-end open source platform for machine learning from Google, has a security vulnerability stemming from the program "tf.rawops. DatasetToTFRecord" implementations can trigger heap buffer overflow and segmentation errors. No detailed vulnerability details are available...

Libelfin Denial of Service Vulnerability (CNVD-2021-66402)

Libelfin is a C 11 library for reading ELF binaries and DWARFv4 debug information. a denial of service vulnerability exists in the dwarf::cursor::skipform function of Libelfin 0.3. An attacker could exploit this vulnerability to cause a denial of service via a specially crafted ELF file causing a...

Libelfin Denial of Service Vulnerability (CNVD-2021-66403)

Libelfin is a C 11 library for reading ELF binaries and DWARFv4 debug information. linetable::linetable function of Libelfin 0.3 is vulnerable to a denial of service. An attacker could exploit this vulnerability to cause a denial of service via a specially crafted ELF file causing a segmentation...

Libelfin Denial of Service Vulnerability (CNVD-2021-66401)

Libelfin is a C 11 library for reading ELF binaries and DWARFv4 debug information. a denial of service vulnerability exists in the dwarf::tostring function of Libelfin 0.3. An attacker could exploit this vulnerability to cause a denial of service via a specially crafted ELF file causing a...

Libelfin Denial of Service Vulnerability (CNVD-2021-66406)

Libelfin is a C 11 library for reading ELF binaries and DWARFv4 debug information. a denial of service vulnerability exists in the dwarf::cursor::uleb function of Libelfin 0.3. An attacker could exploit this vulnerability to cause a denial of service by causing a segmentation error via a speciall...

CVE-2021-37674

TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can trigger a denial of service via a segmentation fault in tf.rawops.MaxPoolGrad caused by missing validation. The implementation misses some validation for the originput and origoutput tensor...

CVE-2021-37674

TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can trigger a denial of service via a segmentation fault in tf.rawops.MaxPoolGrad caused by missing validation. The implementation misses some validation for the originput and origoutput tensor...

PYSEC-2021-587

TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can trigger a denial of service via a segmentation fault in tf.rawops.MaxPoolGrad caused by missing validation. The implementation misses some validation for the originput and origoutput tensor...

PYSEC-2021-296

TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can trigger a denial of service via a segmentation fault in tf.rawops.MaxPoolGrad caused by missing validation. The implementation misses some validation for the originput and origoutput tensor...

CVE-2021-37674

Summary (CVE-2021-37674) TensorFlow’s tf.raw_ops.MaxPoolGrad had insufficient validation for orig_input/orig_output, enabling a local attacker to trigger a denial-of-service via a segmentation fault. The issue is tied to CVE-2021-29579 and is addressed by patch 136b51f10903e044308cf77117c0ed98713...

CVE-2021-37674 Incomplete validation in `MaxPoolGrad` in TensorFlow

TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can trigger a denial of service via a segmentation fault in tf.rawops.MaxPoolGrad caused by missing validation. The implementation misses some validation for the originput and origoutput tensor...

CVE-2021-37650

TensorFlow is an end-to-end open source platform for machine learning. In affected versions the implementation for tf.rawops.ExperimentalDatasetToTFRecord and tf.rawops.DatasetToTFRecord can trigger heap buffer overflow and segmentation fault. The implementation assumes that all records in the...