CVE-2022-23591

Tensorflow is an Open Source Machine Learning Framework. The GraphDef format in TensorFlow does not allow self recursive functions. The runtime assumes that this invariant is satisfied. However, a GraphDef containing a fragment such as the following can be consumed when loading a SavedModel. This...

CVE-2022-35937

TensorFlow is an open source platform for machine learning. The GatherNd function takes arguments that determine the sizes of inputs and outputs. If the inputs given are greater than or equal to the sizes of the outputs, an out-of-bounds memory read is triggered. This issue has been patched in...

EUVD-2019-0137

Malware in sbrugna...

EUVD-2020-0213

Malware in sbrugna...

EUVD-2021-0383

Malware in sbrugna...

EUVD-2021-0310

Malware in sbrugna...

EUVD-2021-0400

Malware in sbrugna...

EUVD-2021-0304

Malware in sbrugna...

EUVD-2022-6925

Malicious code in bioql PyPI...

EUVD-2022-6965

Malicious code in bioql PyPI...

EUVD-2022-6768

Malicious code in bioql PyPI...

EUVD-2022-7468

Malicious code in bioql PyPI...

EUVD-2023-1018

Malicious code in bioql PyPI...

EUVD-2022-6944

Malicious code in bioql PyPI...

EUVD-2022-0309

Malicious code in bioql PyPI...

EUVD-2022-4208

Malicious code in bioql PyPI...

CVE-2022-29209

TensorFlow is an open source platform for machine learning. Prior to versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4, the macros that TensorFlow uses for writing assertions e.g., CHECKLT, CHECKGT, etc. have an incorrect logic when comparing sizet and int values. Due to type conversion rules, several of t...

CVE-2022-41880

TensorFlow is an open source platform for machine learning. When the BaseCandidateSamplerOp function receives a value in trueclasses larger than rangemax, a heap oob read occurs. We have patched the issue in GitHub commit b389f5c944cadfdfe599b3f1e4026e036f30d2d4. The fix will be included in...

CVE-2022-41909

TensorFlow is an open source platform for machine learning. An input encoded that is not a valid CompositeTensorVariant tensor will trigger a segfault in tf.rawops.CompositeTensorVariantToComponents. We have patched the issue in GitHub commits bf594d08d377dc6a3354d9fdb494b32d45f91971 and...

CVE-2022-36018

TensorFlow is an open source platform for machine learning. If RaggedTensorToVariant is given a rtnestedsplits list that contains tensors of ranks other than one, it results in a CHECK fail that can be used to trigger a denial of service attack. We have patched the issue in GitHub commit...