Lucene search
+L

12 matches found

Veracode
Veracode
•added 2024/08/29 10:35 a.m.•12 views

Divide By Zero

tensorflow is vulnerable to Divide By Zero. The vulnerability is caused due to a defect in the optimized implementation of the TransposeConv TFLite operator where there is a missing validation for strideh,w variable. An attacker can craft a model such that strideh,w values are 0 resulting in Divi...

7.8CVSS6.5AI score0.00201EPSS
SaveExploits1References3Affected Software3
SUSE CVE
SUSE CVE
•added 2023/02/15 3:43 a.m.•8 views

SUSE CVE-2021-29588

TensorFlow is an end-to-end open source platform for machine learning. The optimized implementation of the TransposeConv TFLite operator is vulnerable to a division by zero error. An attacker can craft a model such that strideh,w values are 0. Code calling this function must validate these...

7.8CVSS7.5AI score0.00201EPSS
SaveExploits1References3
Github Security Blog
Github Security Blog
•added 2021/05/21 2:26 p.m.•57 views

Division by zero in TFLite's implementation of `TransposeConv`

Impact The optimized implementation of the TransposeConv TFLite operator is vulnerable to a division by zero error: cc int heightcol = height + padt + padb - filterh / strideh + 1; int widthcol = width + padl + padr - filterw / stridew + 1; An attacker can craft a model such that strideh,w values...

7.8CVSS1.2AI score0.00201EPSS
SaveExploits1References8Affected Software3
CNVD
CNVD
•added 2021/05/17 12:00 a.m.•28 views

Google TensorFlow Denial of Service Vulnerability (CNVD-2021-36334)

Google TensorFlow is an end-to-end open source machine learning platform. A security vulnerability exists in the TransposeConv operator in Google TensorFlow. No details of the vulnerability are provided at this time...

7.8CVSS6.6AI score0.00201EPSS
SaveExploits1References1
OSV
OSV
•added 2021/05/14 8:15 p.m.•25 views

CVE-2021-29588

TensorFlow is an end-to-end open source platform for machine learning. The optimized implementation of the TransposeConv TFLite operator is vulnerable to a division by zero error. An attacker can craft a model such that strideh,w values are 0. Code calling this function must validate these...

7.8CVSS7.6AI score
SaveExploits0References2
attackerkb
attackerkb
•added 2021/05/14 8:15 p.m.•13 views

CVE-2021-29588

TensorFlow is an end-to-end open source platform for machine learning. The optimized implementation of the TransposeConv TFLite operator is vulnerable to a division by zero error. An attacker can craft a model such that strideh,w values are 0. Code calling this function must validate these...

7.8CVSS7AI score0.00201EPSS
SaveExploits1References3Affected Software1
OSV
OSV
•added 2021/05/14 8:15 p.m.•23 views

PYSEC-2021-516

TensorFlow is an end-to-end open source platform for machine learning. The optimized implementation of the TransposeConv TFLite operator is vulnerable to a division by zero error. An attacker can craft a model such that strideh,w values are 0. Code calling this function must validate these...

7.8CVSS1.7AI score0.00201EPSS
SaveExploits1References2
PyPA
PyPA
•added 2021/05/14 8:15 p.m.•12 views

PYSEC-2021-714

TensorFlow is an end-to-end open source platform for machine learning. The optimized implementation of the TransposeConv TFLite operator is vulnerable to a division by zero error. An attacker can craft a model such that strideh,w values are 0. Code calling this function must validate these...

7.8CVSS7AI score0.00201EPSS
SaveExploits1References2Affected Software1
Prion
Prion
•added 2021/05/14 8:15 p.m.•21 views

Design/Logic Flaw

TensorFlow is an end-to-end open source platform for machine learning. The optimized implementation of the TransposeConv TFLite operator is vulnerable to a division by zero error. An attacker can craft a model such that strideh,w values are 0. Code calling this function must validate these...

4.6CVSS7.6AI score0.00201EPSS
SaveExploits1References2Affected Software1
Debian CVE
Debian CVE
•added 2021/05/14 7:22 p.m.•16 views

CVE-2021-29588

TensorFlow is an end-to-end open source platform for machine learning. The optimized implementation of the TransposeConv TFLite operator is vulnerable to a division by zero error. An attacker can craft a model such that strideh,w values are 0. Code calling this function must validate these...

7.8CVSS7AI score0.00201EPSS
SaveExploits1
CNNVD
CNNVD
•added 2021/05/14 12:00 a.m.•18 views

Google TensorFlow 数字错误漏洞

Google TensorFlow is an end-to-end open source machine learning platform. A security vulnerability exists in the TransposeConv operator in Google TensorFlow. No details of the vulnerability are provided at this time...

7.8CVSS5.5AI score0.00201EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/05/14 12:00 a.m.•2 views

CVE-2021-29588: Divide By Zero

TensorFlow is an end-to-end open source platform for machine learning. The optimized implementation of the TransposeConv TFLite operator is vulnerable to a division by zero error. An attacker can craft a model such that strideh,w values are 0. Code calling this function must validate these...

7.8CVSS5.9AI score0.00201EPSS
SaveExploits1References3
Rows per page
Query Builder