tf.keras.layers.Conv2D() DoS

The vulnerability of the tf.keras.layers.Conv2D function in TensorFlow’s machine learning system is related to uncontrolled resource consumption when the padding='valid' parameter is used. Exploiting this vulnerability could allow a malicious actor to cause a service failure...

PYSEC-2021-222

TensorFlow is an end-to-end open source platform for machine learning. The TFLite computation for size of output after padding, ComputeOutSizehttps://github.com/tensorflow/tensorflow/blob/0c9692ae7b1671c983569e5d3de5565843d500cf/tensorflow/lite/kernels/padding.hL43-L55, does not check that the...