a2grunnerp (>=0.1.0, <=0.1.8), aisdc (1.0.1) +43 more potentially affected by CVE-2022-41895 via tensorflow (2.10.0)

tensorflow PYPI version 2.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - a2grunnerp =0.1.0, =0.1.1b2, =1.0.0, =0.1.0, =0.1.3, =1.0.0, =0.7.0, =1.0.0 - cv2-group 0.2.0 - decimer-segmentation 1.1.1 and more Source...

aadhaar-detection (0.5.0), abba-python (>=0.1.6, <=0.3.0) +1016 more potentially affected by CVE-2022-41900 via tensorflow (>=1.0.1, <=2.8.3)

tensorflow PYPI version =1.0.1, =0.1.6, =0.1.1, =1.0.1, =1.0.0, =6.0.0, =1.2.0, =1.1.2, =0.0.1, =0.3.26, =1.1.5, =1.3.2 and more Source cves: CVE-2022-41900 Source advisory: MEND:CVE-2022-41900...

Google TensorFlow buffer error vulnerability

Google TensorFlow is an end-to-end open source platform for machine learning from Google, Inc. A buffer overflow vulnerability exists in Google TensorFlow, which originates from the "MirrorPadGrad" input "paddings" is too large, an attacker can use this vulnerability to cause a heap memory...

aadhaar-detection (0.5.0), abba-python (>=0.1.6, <=0.3.0) +1016 more potentially affected by CVE-2022-41895 via tensorflow (>=1.0.1, <=2.8.3)

tensorflow PYPI version =1.0.1, =0.1.6, =0.1.1, =1.0.1, =1.0.0, =6.0.0, =1.2.0, =1.1.2, =0.0.1, =0.3.26, =1.1.5, =1.3.2 and more Source cves: CVE-2022-41895 Source advisory: MEND:CVE-2022-41895...

aggmap (>=1.1.1, <=1.2.1), molmap (>=1.3.1, <=1.4.0) potentially affected by CVE-2022-41895 via tensorflow-gpu (2.9.1)

tensorflow-gpu PYPI version 2.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow-gpu and may be impacted: - aggmap =1.1.1, =1.3.1, =1.4.0 Source cves: CVE-2022-41895 Source advisory: MEND:CVE-2022-41895...

PT-2022-26115

Name of the Vulnerable Software and Affected Versions TensorFlow versions prior to 2.11 TensorFlow version 2.10.1 TensorFlow version 2.9.3 TensorFlow version 2.8.4 Description The issue arises when a numpy array is created with a shape such that one element is zero and the others sum to a large...

clip-jax (0.0.5), sdeper (>=1.1.0, <=1.6.1) potentially affected by CVE-2022-41884 via tensorflow-cpu (>=2.9.0, <=2.9.1)

tensorflow-cpu PYPI version =2.9.0, =1.1.0, =1.6.1 Source cves: CVE-2022-41884 Source advisory: MEND:CVE-2022-41884...

c4v-py (>=0.1.0.dev1, <=0.1.0.dev202107081840), gamornet-cpu (>=0.2.3, <=0.4.3) +11 more potentially affected by CVE-2022-41884 via tensorflow-cpu (>=1.15.0, <=2.7.4)

tensorflow-cpu PYPI version =1.15.0, =0.1.0.dev1, =0.2.3, =0.1.2, =0.0.4, =1.5.0, =0.5.1, =0.102.0.dev0, =1.5.2, =0.7.0, =0.7.5 - tpu-tf2 1.0.0 Source cves: CVE-2022-41884 Source advisory: MEND:CVE-2022-41884...

aggmap (>=1.1.1, <=1.2.1), molmap (>=1.3.1, <=1.4.0) potentially affected by CVE-2022-41884 via tensorflow-gpu (2.9.1)

tensorflow-gpu PYPI version 2.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow-gpu and may be impacted: - aggmap =1.1.1, =1.3.1, =1.4.0 Source cves: CVE-2022-41884 Source advisory: MEND:CVE-2022-41884...

animl (>=1.1.2, <=1.1.4), arekit (>=0.21.0, <=0.22.1) +118 more potentially affected by CVE-2022-41884 via tensorflow-gpu (>=1.1.0, <=2.8.3)

tensorflow-gpu PYPI version =1.1.0, =1.1.2, =0.21.0, =0.23.0, =0.9.2, =0.0.1, =0.0.9, =0.1.0, =1.0.0, =0.2.1, =0.1.0, =0.1.2 - classitransformers 0.0.1 and more Source cves: CVE-2022-41884 Source advisory: MEND:CVE-2022-41884...

aadhaar-detection (0.5.0), abba-python (>=0.1.6, <=0.3.0) +1016 more potentially affected by CVE-2022-41884 via tensorflow (>=1.0.1, <=2.8.3)

tensorflow PYPI version =1.0.1, =0.1.6, =0.1.1, =1.0.1, =1.0.0, =6.0.0, =1.2.0, =1.1.2, =0.0.1, =0.3.26, =1.1.5, =1.3.2 and more Source cves: CVE-2022-41884 Source advisory: MEND:CVE-2022-41884...

CVE-2022-41901 `CHECK_EQ` fail via input in `SparseMatrixNNZ` in Tensorflow

TensorFlow is an open source platform for machine learning. An input sparsematrix that is not a matrix with a shape with rank 0 will trigger a CHECK fail in tf.rawops.SparseMatrixNNZ. We have patched the issue in GitHub commit f856d02e5322821aad155dad9b3acab1e9f5d693. The fix will be included in...

aimodelshare (>=0.0.157, <=0.1.0), aliby (>=0.1.18, <=0.1.55) +76 more potentially affected by CVE-2022-41895 via tensorflow (>=2.9.0, <=2.9.2)

tensorflow PYPI version =2.9.0, =0.0.157, =0.1.18, =0.1.11, =0.30.0, =0.0.13, =0.1.0, =0.2.6, =0.0.1, =1.0.0, =1.1.0 and more Source cves: CVE-2022-41895 Source advisory: MEND:CVE-2022-41895...

CVE-2022-41900

TensorFlow CVE-2022-41900 affects FractionalMax(AVG)Pool due to an illegal pooling_ratio, potentially allowing access to heap memory and causing a crash or remote code execution. The issue has been patched in GitHub commit 216525144ee7c910296f5b05d214ca1327c9ce48, with the fix scheduled for Tenso...

CVE-2022-41898 `CHECK` fail via inputs in `SparseFillEmptyRowsGrad` in Tensorflow

TensorFlow is an open source platform for machine learning. If SparseFillEmptyRowsGrad is given empty inputs, TensorFlow will crash. We have patched the issue in GitHub commit af4a6a3c8b95022c351edae94560acc61253a1b8. The fix will be included in TensorFlow 2.11. We will also cherrypick this commi...

CVE-2022-41899 `CHECK` fail via inputs in `SdcaOptimizer` in Tensorflow

TensorFlow is an open source platform for machine learning. Inputs densefeatures or examplestatedata not of rank 2 will trigger a CHECK fail in SdcaOptimizer. We have patched the issue in GitHub commit 80ff197d03db2a70c6a111f97dcdacad1b0babfa. The fix will be included in TensorFlow 2.11. We will...

CVE-2022-41883 Out of bounds segmentation fault due to unequal op inputs in Tensorflow

TensorFlow is an open source platform for machine learning. When ops that have specified input sizes receive a differing number of inputs, the executor will crash. We have patched the issue in GitHub commit f5381e0e10b5a61344109c1b7c174c68110f7629. The fix will be included in TensorFlow 2.11. We...

aimodelshare (>=0.0.157, <=0.1.0), aliby (>=0.1.18, <=0.1.55) +76 more potentially affected by CVE-2022-41897 via tensorflow (>=2.9.0, <=2.9.2)

tensorflow PYPI version =2.9.0, =0.0.157, =0.1.18, =0.1.11, =0.30.0, =0.0.13, =0.1.0, =0.2.6, =0.0.1, =1.0.0, =1.1.0 and more Source cves: CVE-2022-41897 Source advisory: MEND:CVE-2022-41897...

clip-jax (0.0.5), sdeper (>=1.1.0, <=1.6.1) potentially affected by CVE-2022-41911 via tensorflow-cpu (>=2.9.0, <=2.9.1)

tensorflow-cpu PYPI version =2.9.0, =1.1.0, =1.6.1 Source cves: CVE-2022-41911 Source advisory: MEND:CVE-2022-41911...

CVE-2022-41880

TensorFlow CVE-2022-41880 describes a heap-based out-of-bounds read in BaseCandidateSamplerOp when true_classes contains a value greater than range_max. A patch was committed (b389f5c944cadfdfe599b3f1e4026e036f30d2d4) and the fix is scheduled for TensorFlow 2.11, with cherry-picks to 2.10.1, 2.9....