The vulnerability of the `tf.keras.layers.Conv2D()` function in the TensorFlow machine learning system, which allows attackers to trigger a service denial-of-service attack.

The vulnerability of the tf.keras.layers.Conv2D function in TensorFlow’s machine learning system is related to uncontrolled resource consumption when the padding='valid' parameter is used. Exploiting this vulnerability could allow a malicious actor to cause a service failure...

PYSEC-2021-222

TensorFlow is an end-to-end open source platform for machine learning. The TFLite computation for size of output after padding, ComputeOutSizehttps://github.com/tensorflow/tensorflow/blob/0c9692ae7b1671c983569e5d3de5565843d500cf/tensorflow/lite/kernels/padding.hL43-L55, does not check that the...