9230 matches found
TensorFlow vulnerable to Heap Buffer Overflow in AvgPoolGrad
...
TensorFlow has Floating Point Exception in AudioSpectrogram
...
TensorFlow has Floating Point Exception in AvgPoolGrad with XLA
...
TensorFlow vulnerable to Out-of-Bounds Read in DynamicStitch
...
TensorFlow has Null Pointer Error in LookupTableImportV2
...
TensorFlow has Floating Point Exception in TensorListSplit with XLA
...
TensorFlow vulnerable to heap out-of-buffer read in the QuantizeAndDequantize operation
...
TensorFlow vulnerable to seg fault in `tf.raw_ops.Print`
...
TensorFlow vulnerable to Out-of-Bounds Read in GRUBlockCellGrad
...
OPENSUSE-SU-2024:12116-1 tensorflow-lite-2.9.1-1.1 on GA media
These are all security issues fixed in the tensorflow-lite-2.9.1-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:12355-1 tensorflow-lite-2.10.0-1.1 on GA media
These are all security issues fixed in the tensorflow-lite-2.10.0-1.1 package on the GA media of openSUSE Tumbleweed...
BIT-MLFLOW-2024-37057
Deserialization of untrusted data can occur in versions of the MLflow platform running version 2.0.0 or newer, enabling a maliciously uploaded Tensorflow model to run arbitrary code on an end user’s system when interacted with...
Deserialization Of Untrusted Data
mlflow is vulnerable to Deserialization of Untrusted Data. The vulnerability is due to inadequate input validation in the loadcustomobjects function within mlflow/tensorflow/init.py, which allows attackers to execute arbitrary code by injecting a malicious pickle object into the Tensorflow model...
MLFlow unsafe deserialization
Deserialization of untrusted data can occur in versions of the MLflow platform running version 2.0.0rc0 or newer, enabling a maliciously uploaded Tensorflow model to run arbitrary code on an end user’s system when interacted with...
GHSA-J8MG-PQC5-X9GJ MLFlow unsafe deserialization
Deserialization of untrusted data can occur in versions of the MLflow platform running version 2.0.0rc0 or newer, enabling a maliciously uploaded Tensorflow model to run arbitrary code on an end user’s system when interacted with...
CVE-2024-37057
Deserialization of untrusted data can occur in versions of the MLflow platform running version 2.0.0rc0 or newer, enabling a maliciously uploaded Tensorflow model to run arbitrary code on an end user’s system when interacted with...
CVE-2024-37057
Deserialization of untrusted data can occur in versions of the MLflow platform running version 2.0.0rc0 or newer, enabling a maliciously uploaded Tensorflow model to run arbitrary code on an end user’s system when interacted with...
CVE-2024-37057
Deserialization of untrusted data can occur in versions of the MLflow platform running version 2.0.0rc0 or newer, enabling a maliciously uploaded Tensorflow model to run arbitrary code on an end user’s system when interacted with...
CVE-2024-37057
Deserialization of untrusted data can occur in versions of the MLflow platform running version 2.0.0rc0 or newer, enabling a maliciously uploaded Tensorflow model to run arbitrary code on an end user’s system when interacted with...
PT-2024-27272
Name of the Vulnerable Software and Affected Versions MLflow platform versions 2.0.0rc0 and newer Description The issue allows deserialization of untrusted data, enabling a maliciously uploaded Tensorflow model to run arbitrary code on an end user's system when interacted with. Recommendations Fo...