Google TensorFlow heap buffer overflow vulnerability (CNVD-2021-37649)

Google TensorFlow is an end-to-end open source machine learning platform. A heap buffer overflow vulnerability exists in tf.rawops.MaxPoolGrad in Google TensorFlow. No detailed vulnerability details are provided at this time...

TensorFlow divide-by-zero error vulnerability (CNVD-2021-36565)

Google TensorFlow is an end-to-end open source machine learning platform. A divide-by-zero error vulnerability exists in the tf.rawops.Conv2DBackpropInput implementation in TensorFlow versions prior to 2.5.0. No detailed vulnerability details are provided at this time...

Google TensorFlow QuantizedReshape Denial of Service Vulnerability

Google TensorFlow is an end-to-end open source machine learning platform. A security vulnerability exists in Google TensorFlow QuantizedReshape. A local attacker could exploit this vulnerability to cause a denial of service...

Google TensorFlow heap out-of-bounds read vulnerability (CNVD-2021-37627)

Google TensorFlow is an end-to-end open source machine learning platform. A heap out-of-bounds read vulnerability exists in Google TensorFlow. An attacker can exploit the vulnerability to read data outside the boundaries of the heap allocation buffer in "tf.raw\u ops.QuantizeAndDequantizeV3"...

Google TensorFlow RaggedCross Denial of Service Vulnerability

Google TensorFlow is an end-to-end open source machine learning platform. A security vulnerability exists in Google TensorFlow RaggedCross. An attacker can exploit the vulnerability by passing invalid tensor values to tf.rawops.RaggedCross to cause a heap out-of-bounds read...

Google TensorFlow SparseFillEmptyRows Denial of Service Vulnerability

Google TensorFlow is an end-to-end open source machine learning platform. A security vulnerability exists in Google TensorFlow SparseFillEmptyRows. An attacker can exploit the vulnerability to trigger null pointer dereference in the "tf.raw\u ops.SparseFillEmptyRows" implementation...

Google TensorFlow EditDistance Denial of Service Vulnerability

Google TensorFlow is an end-to-end open source machine learning platform. A security vulnerability exists in Google TensorFlow EditDistance. An attacker can exploit the vulnerability to trigger a null pointer dereference when implementing 'tf.rawuops.EditDistance...

Google TensorFlow tf.raw_ops.RFFT Denial of Service Vulnerability

Google TensorFlow is an end-to-end open source machine learning platform. A denial of service vulnerability exists in Google TensorFlow tf.rawops.RFFT. An attacker can exploit this vulnerability to cause a CHECK-failure denial of service...

TensorFlow divide-by-zero error vulnerability (CNVD-2021-36566)

Google TensorFlow is an end-to-end open source machine learning platform. A divide-by-zero error vulnerability exists in the tf.rawops.Conv2D implementation in TensorFlow versions prior to 2.5.0. No details of the vulnerability are provided at this time...

Denial Of Service (DoS)

tensorflow is vulnerable to denial of service. The vulnerability exists due to division by zero error in tf.rawops.MaxPoolGradWithArgmax which is caused by the failure to validate the batch dimension of the tensor is non-zero before dividing it...

Denial Of Service (DoS)

tensorflow is vulnerable to denial of service. An attacker is able to exploit the vulnerability by calling tf.rawops.ImmutableConst with a dtype of tf.resource or tf.variant resulting in a segfault...

Denial Of Service (DoS)

tensorflow is vulnerable to denial of service. The vulnerability exists due to an undefined behavior in tf.rawops.MaxPool3DGradGrad by dereferencing null pointers backing attacker-supplied empty tensors...

Out-of-Bounds Read

tensorflow has out-of-bound read. The vulnerability exists due to failure to validate the indices used to access elements of input/output arrays...

Denial Of Service (DoS)

tensorflow is vulnerable to denial of service. The vulnerability exists due to MatrixTriangularSolve failing to terminate kernel execution if one validation condition fails...

Out-of-Bounds Read

tensorflow has out-of-bound read. The vulnerability exists due to the lack of validation of axis allowing an attacker to be able to read data from outside of the bounds of heap allocated in the buffer in tf.rawops.QuantizeAndDequantizeV3...

Out-of-Bounds Read

tensorflow has out-of-bound read. The vulnerability exists due to a lack of validation in tf.rawops.Dequantize which allows an attacker to trigger a read from outside the allocated bounds of heap...

Denial Of Service (DoS)

tensorflow is vulnerable to denial of service. An attacker may exploit the vulnerability by passing invalid arguments to tf.rawops.Dilation2DBackpropInput causing an out of bounds write to the heap...

Denial Of Service (DoS)

tensorflow is vulnerable to denial of service. An attacker may exploit the vulnerability by inputting a crafted x tensor which may cause a FPE runtime error in tf.rawops.FusedBatchNorm...

Denial Of Service (DoS)

tensorflow is vulnerable to denial of service. An attacker is able to send a malicious input to cause a memory overflow in ParseAttrValue from nested tensors...

Denial Of Service (DoS)

tensorflow is vulnerable to denial of service. An attacker is able to exploit the vulnerability by inputting a crafted model such that the numsplits would be 0, into the split TFLite operator...