Lucene search
+L

55 matches found

Github Security Blog
Github Security Blog
•added 2021/08/25 2:43 p.m.•72 views

Bad alloc in `StringNGrams` caused by integer conversion

Impact The implementation of tf.rawops.StringNGrams is vulnerable to an integer overflow issue caused by converting a signed integer value to an unsigned one and then allocating memory based on this value. python import tensorflow as tf tf.rawops.StringNGrams data='','', datasplits=0,2, separator...

5.5CVSS6.1AI score0.00154EPSS
SaveExploits0References7Affected Software3
NVD
NVD
•added 2021/08/12 9:15 p.m.•27 views

CVE-2021-37646

TensorFlow is an end-to-end open source platform for machine learning. In affected versions the implementation of tf.rawops.StringNGrams is vulnerable to an integer overflow issue caused by converting a signed integer value to an unsigned one and then allocating memory based on this value. The...

5.5CVSS0.00154EPSS
SaveExploits0References2
OSV
OSV
•added 2021/08/12 9:15 p.m.•13 views

PYSEC-2021-757

TensorFlow is an end-to-end open source platform for machine learning. In affected versions the implementation of tf.rawops.StringNGrams is vulnerable to an integer overflow issue caused by converting a signed integer value to an unsigned one and then allocating memory based on this value. The...

5.5CVSS5.9AI score0.00154EPSS
SaveExploits0References2
PyPA
PyPA
•added 2021/08/12 9:15 p.m.•12 views

PYSEC-2021-757

TensorFlow is an end-to-end open source platform for machine learning. In affected versions the implementation of tf.rawops.StringNGrams is vulnerable to an integer overflow issue caused by converting a signed integer value to an unsigned one and then allocating memory based on this value. The...

5.5CVSS7.2AI score0.00154EPSS
SaveExploits0References2Affected Software1
attackerkb
attackerkb
•added 2021/08/12 9:15 p.m.•10 views

CVE-2021-37646

TensorFlow is an end-to-end open source platform for machine learning. In affected versions the implementation of tf.rawops.StringNGrams is vulnerable to an integer overflow issue caused by converting a signed integer value to an unsigned one and then allocating memory based on this value. The...

5.5CVSS5.7AI score0.00154EPSS
SaveExploits0References3Affected Software1
OSV
OSV
•added 2021/08/12 9:15 p.m.•27 views

PYSEC-2021-559

TensorFlow is an end-to-end open source platform for machine learning. In affected versions the implementation of tf.rawops.StringNGrams is vulnerable to an integer overflow issue caused by converting a signed integer value to an unsigned one and then allocating memory based on this value. The...

5.5CVSS3.5AI score0.00154EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2021/08/12 9:10 p.m.•56 views

CVE-2021-37646 Bad alloc in `StringNGrams` caused by integer conversion in TensorFlow

TensorFlow is an end-to-end open source platform for machine learning. In affected versions the implementation of tf.rawops.StringNGrams is vulnerable to an integer overflow issue caused by converting a signed integer value to an unsigned one and then allocating memory based on this value. The...

5.5CVSS6.2AI score0.00154EPSS
SaveExploits0References2
CNVD
CNVD
•added 2021/05/18 12:00 a.m.•25 views

Google TensorFlow StringNGrams Denial of Service Vulnerability

Google TensorFlow is an end-to-end open source machine learning platform. A security vulnerability exists in Google TensorFlow StringNGrams. An attacker can exploit the vulnerability by passing specially crafted input to tf.rawops.StringNGrams to cause a heap buffer overflow...

5.5CVSS6.7AI score0.00198EPSS
SaveExploits1References1
CNVD
CNVD
•added 2021/05/18 12:00 a.m.•18 views

Google TensorFlow StringNGrams Denial of Service Vulnerability (CNVD-2021-37619)

Google TensorFlow is an end-to-end open source machine learning platform. A security vulnerability exists in Google TensorFlow StringNGrams. An attacker can exploit the vulnerability to trigger a dereference to a null pointer in "tf.raw\u ops.stringrams"...

5.5CVSS6.4AI score0.00189EPSS
SaveExploits1References1
NVD
NVD
•added 2021/05/14 8:15 p.m.•43 views

CVE-2021-29542

TensorFlow is an end-to-end open source platform for machine learning. An attacker can cause a heap buffer overflow by passing crafted inputs to tf.rawops.StringNGrams. This is because the...

5.5CVSS0.00198EPSS
SaveExploits1References2
OSV
OSV
•added 2021/05/14 8:15 p.m.•35 views

CVE-2021-29542

TensorFlow is an end-to-end open source platform for machine learning. An attacker can cause a heap buffer overflow by passing crafted inputs to tf.rawops.StringNGrams. This is because the...

5.5CVSS5.6AI score
SaveExploits0References2
PyPA
PyPA
•added 2021/05/14 8:15 p.m.•10 views

PYSEC-2021-667

TensorFlow is an end-to-end open source platform for machine learning. An attacker can trigger a dereference of a null pointer in tf.rawops.StringNGrams. This is because the...

5.5CVSS6.9AI score0.00189EPSS
SaveExploits1References2Affected Software1
OSV
OSV
•added 2021/05/14 8:15 p.m.•26 views

PYSEC-2021-470

TensorFlow is an end-to-end open source platform for machine learning. An attacker can cause a heap buffer overflow by passing crafted inputs to tf.rawops.StringNGrams. This is because the...

5.5CVSS0.6AI score0.00198EPSS
SaveExploits1References2
PyPA
PyPA
•added 2021/05/14 8:15 p.m.•11 views

PYSEC-2021-178

TensorFlow is an end-to-end open source platform for machine learning. An attacker can trigger a dereference of a null pointer in tf.rawops.StringNGrams. This is because the...

5.5CVSS6.9AI score0.00189EPSS
SaveExploits1References2Affected Software1
PyPA
PyPA
•added 2021/05/14 8:15 p.m.•16 views

PYSEC-2021-668

TensorFlow is an end-to-end open source platform for machine learning. An attacker can cause a heap buffer overflow by passing crafted inputs to tf.rawops.StringNGrams. This is because the...

5.5CVSS7.4AI score0.00198EPSS
SaveExploits1References2Affected Software1
attackerkb
attackerkb
•added 2021/05/14 8:15 p.m.•7 views

CVE-2021-29541

TensorFlow is an end-to-end open source platform for machine learning. An attacker can trigger a dereference of a null pointer in tf.rawops.StringNGrams. This is because the...

5.5CVSS6.1AI score0.00189EPSS
SaveExploits1References3Affected Software1
OSV
OSV
•added 2021/05/14 8:15 p.m.•15 views

PYSEC-2021-667

TensorFlow is an end-to-end open source platform for machine learning. An attacker can trigger a dereference of a null pointer in tf.rawops.StringNGrams. This is because the...

5.5CVSS5.9AI score0.00189EPSS
SaveExploits1References2
attackerkb
attackerkb
•added 2021/05/14 8:15 p.m.•7 views

CVE-2021-29542

TensorFlow is an end-to-end open source platform for machine learning. An attacker can cause a heap buffer overflow by passing crafted inputs to tf.rawops.StringNGrams. This is because the...

5.5CVSS6.2AI score0.00198EPSS
SaveExploits1References3Affected Software1
OSV
OSV
•added 2021/05/14 8:15 p.m.•19 views

PYSEC-2021-178

TensorFlow is an end-to-end open source platform for machine learning. An attacker can trigger a dereference of a null pointer in tf.rawops.StringNGrams. This is because the...

5.5CVSS6.1AI score0.00189EPSS
SaveExploits1References2
OSV
OSV
•added 2021/05/14 8:15 p.m.•11 views

PYSEC-2021-668

TensorFlow is an end-to-end open source platform for machine learning. An attacker can cause a heap buffer overflow by passing crafted inputs to tf.rawops.StringNGrams. This is because the...

5.5CVSS6.3AI score0.00198EPSS
SaveExploits1References2
Rows per page
Query Builder