GHSA-9JJW-HF72-3MXW TensorFlow vulnerable to heap out of bounds read in filesystem glob matching

Impact The general implementation for matching filesystem paths to globbing pattern is vulnerable to an access out of bounds of the array holding the directories: cc if !fs-Matchchildpath, dirsdirindex ... Since dirindex is unconditionaly incremented outside of the lambda function where the...

Denial Of Service (DoS)

tensorflow is vulnerable to denial of service. The vulnerability exists due to a lack of validation of the FakeQuantWithMinMaxVarsPerChannel input allowing an attacker to bring the system into a failed 'CHECK' resulting in the system stalling...

Denial Of Service (DoS)

tensorflow is vulnerable to denial of service. The vulnerability exists because the library does not properly validate the quantize ops inputs, allowing an attacker to crash the application through the segmentation fault by passing a nonzero rank when QuantizedInstanceNorm is given xmin or xmax...

Denial Of Service (DoS)

tensorflow is vulnerable to denial of service. An attacker can crash the application through the segmentation fault by passing a nonzero rank when QuantizedAvgPool is given mininput or maxinput tensors to the quantizedpoolingops.cc...

Denial Of Service (DoS)

tensorflow is vulnerable to denial of service. An attacker can crash the application through the segmentation fault by passing a nonzero rank when QuantizedAvgPool is given mininput or maxinput tensors to the quantizedpoolingops.cc in eager mode...

AZL-38908 CVE-2022-1941 affecting package tensorflow for versions less than 2.16.1-1

A parsing vulnerability for the MessageSet type in the ProtocolBuffers versions prior to and including 3.16.1, 3.17.3, 3.18.2, 3.19.4, 3.20.1 and 3.21.5 for protobuf-cpp, and versions prior to and including 3.16.1, 3.17.3, 3.18.2, 3.19.4, 3.20.1 and 4.21.5 for protobuf-python can lead to out of...

Denial Of Service (DoS)

tensorflow is vulnerable to denial of service. The vulnerability exists in tensorslicewriter.cc and its respective header file because the dtypes are not properly checked when running Save and SaveSlices which allows an attacker to send unsupported dtypes causing an application crash...

Denial Of Service (DoS)

tensorflow is vulnerable to denial of service. The vulnerability exists in randomop.cc and randompoissonop.cc because the RandomPoissonV2 doesn't check the size for large input shape and rates which allows an attacker to send inputs that exceed the size check causing an application crash...

Denial Of Service (DoS)

tensorflow is vulnerable to denial of service. The vulnerability exists because the outputshape.AddDim function of avgpoolingop.cc does not properly check the ksize arguments, allowing an attacker to crash the application through the check failure...

Denial Of Service (DoS)

tensorflow is vulnerable to denial of service. The vulnerability exists Compute function of convgradinputops.h because the CPU/GPU kernels are not properly handled for empty outbackprop inputs which allows an attacker to cause an application crash by sending malicious inputs...

Denial Of Service (DoS)

tensorflow is vulnerable to denial of service. The vulnerability exists in the multiple functions in searchsortedop.cc due to an empty sortedinputs which allows an attacker to cause an application crash by providing malicious input...

Denial Of Service (DoS)

tensorflow is vulnerable to denial of service. The vulnerability exists because the outputshape.AddDim function of avgpoolingop.cc does not properly validate the input for originputshape, allowing an attacker to crash the application through the check failure...

Denial Of Service (DoS)

tensorflow is vulnerable to denial of service. The vulnerability exists because the OPREQUIRES function of lstmops.cc does not properly check the size validation for BlockLSTMGradV2, allowing an attacker to cause an application crash through the segmentation fault...

Denial Of Service (DoS)

tensorflow is vulnerable to denial of service. The vulnerability exists in Compute function of reshapeop.h because the number of elements size is not properly handled which allows an attacker to entry more than one element causing an application crash...

Denial Of Service (DoS)

tensorflow is vulnerable to denial of service. The vulnerability exists in Compute function of batchkernels.cc because the function doesn't handle nonscalar argument ids which allows an attacker to cause an application crash...

Denial Of Service (DoS)

tensorflow is vulnerable to denial of service. The vulnerability exists in Compute function of listkernels.cc because the it doesn't properly handle the size of numelements which allows an attacker to provide more than one element causing an application crash...

Denial Of Service (DoS)

tensorflow is vulnerable to denial of service. The vulnerability exists in Compute function of poolingops3d.cc because it doesn't properly validate the originputshape input which allows an attacker to bypass inputs which result in a check failure causing an application crash...

Google TensorFlow Denial of Service Vulnerability (CNVD-2023-10608)

Google TensorFlow is an end-to-end open source platform for machine learning from Google, Inc. A denial-of-service vulnerability exists in Google TensorFlow, which stems from the fact that FakeQuantWithMinMaxVars will fail to assert if it is given a tensor of non-zero rank min or max. An attacker...

Google TensorFlow EmptyTensorList Denial of Service Vulnerability

Google TensorFlow is an end-to-end open source platform for machine learning from Google, Inc. A denial-of-service vulnerability exists in Google TensorFlow, which originates when EmptyTensorList receives an input elementshape with multiple dimensions and it gives an assertion of failure. An...

Google TensorFlow DrawBoundingBoxes Denial of Service Vulnerability

Google TensorFlow is an end-to-end open source platform for machine learning from Google, Inc. A denial-of-service vulnerability exists in Google TensorFlow, which stems from the fact that when DrawBoundingBoxes receives input boxes that do not belong to the float dtype, it gives the assertion...