Lucene search
+L

13 matches found

Veracode
Veracode
•added 2024/08/29 10:35 a.m.•16 views

Divide By Zero

tensorflow is vulnerable to Divide By Zero. The vulnerability is caused due to a defect in the optimized implementation of the TransposeConv TFLite operator where there is a missing validation for strideh,w variable. An attacker can craft a model such that strideh,w values are 0 resulting in Divi...

7.8CVSS6.5AI score0.00201EPSS
SaveExploits1References3Affected Software3
SUSE CVE
SUSE CVE
•added 2023/02/15 3:43 a.m.•8 views

SUSE CVE-2021-29588

TensorFlow is an end-to-end open source platform for machine learning. The optimized implementation of the TransposeConv TFLite operator is vulnerable to a division by zero error. An attacker can craft a model such that strideh,w values are 0. Code calling this function must validate these...

7.8CVSS7.5AI score0.00201EPSS
SaveExploits1References3
Github Security Blog
Github Security Blog
•added 2021/05/21 2:26 p.m.•63 views

Division by zero in TFLite's implementation of `TransposeConv`

Impact The optimized implementation of the TransposeConv TFLite operator is vulnerable to a division by zero error: cc int heightcol = height + padt + padb - filterh / strideh + 1; int widthcol = width + padl + padr - filterw / stridew + 1; An attacker can craft a model such that strideh,w values...

7.8CVSS1.2AI score0.00201EPSS
SaveExploits1References8Affected Software3
CNVD
CNVD
•added 2021/05/17 12:00 a.m.•35 views

Google TensorFlow Denial of Service Vulnerability (CNVD-2021-36334)

Google TensorFlow is an end-to-end open source machine learning platform. A security vulnerability exists in the TransposeConv operator in Google TensorFlow. No details of the vulnerability are provided at this time...

7.8CVSS6.6AI score0.00201EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2021/05/14 8:15 p.m.•27 views

CVE-2021-29588

TensorFlow is an end-to-end open source platform for machine learning. The optimized implementation of the TransposeConv TFLite operator is vulnerable to a division by zero error. An attacker can craft a model such that strideh,w values are 0. Code calling this function must validate these...

7.8CVSS7.6AI score
SaveExploits0References2
Prion
Prion
•added 2021/05/14 8:15 p.m.•23 views

Design/Logic Flaw

TensorFlow is an end-to-end open source platform for machine learning. The optimized implementation of the TransposeConv TFLite operator is vulnerable to a division by zero error. An attacker can craft a model such that strideh,w values are 0. Code calling this function must validate these...

4.6CVSS7.6AI score0.00201EPSS
SaveExploits1References2Affected Software1
osv_pysec
osv_pysec
•added 2021/05/14 8:15 p.m.•26 views

PYSEC-2021-516

TensorFlow is an end-to-end open source platform for machine learning. The optimized implementation of the TransposeConv TFLite operator is vulnerable to a division by zero error. An attacker can craft a model such that strideh,w values are 0. Code calling this function must validate these...

7.8CVSS1.7AI score0.00201EPSS
SaveExploits1References2
attackerkb
attackerkb
•added 2021/05/14 8:15 p.m.•18 views

CVE-2021-29588

TensorFlow is an end-to-end open source platform for machine learning. The optimized implementation of the TransposeConv TFLite operator is vulnerable to a division by zero error. An attacker can craft a model such that strideh,w values are 0. Code calling this function must validate these...

7.8CVSS7AI score0.00201EPSS
SaveExploits1References3Affected Software1
PyPA
PyPA
•added 2021/05/14 8:15 p.m.•13 views

PYSEC-2021-714

TensorFlow is an end-to-end open source platform for machine learning. The optimized implementation of the TransposeConv TFLite operator is vulnerable to a division by zero error. An attacker can craft a model such that strideh,w values are 0. Code calling this function must validate these...

7.8CVSS7AI score0.00201EPSS
SaveExploits1References2Affected Software1
Mend
Mend
•added 2021/05/14 7:22 p.m.•7 views

CVE-2021-29588

TensorFlow is an end-to-end open source platform for machine learning. The optimized implementation of the "TransposeConv" TFLite operator is "vulnerable to a division by zero error"...

7.8CVSS0.00201EPSS
SaveExploits1References8
Debian CVE
Debian CVE
•added 2021/05/14 7:22 p.m.•18 views

CVE-2021-29588

TensorFlow is an end-to-end open source platform for machine learning. The optimized implementation of the TransposeConv TFLite operator is vulnerable to a division by zero error. An attacker can craft a model such that strideh,w values are 0. Code calling this function must validate these...

7.8CVSS7AI score0.00201EPSS
SaveExploits1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/05/14 12:00 a.m.•7 views

CVE-2021-29588: Divide By Zero

TensorFlow is an end-to-end open source platform for machine learning. The optimized implementation of the TransposeConv TFLite operator is vulnerable to a division by zero error. An attacker can craft a model such that strideh,w values are 0. Code calling this function must validate these...

7.8CVSS5.9AI score0.00201EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2021/05/14 12:00 a.m.•25 views

Google TensorFlow numerical error vulnerability

Google TensorFlow is an end-to-end open source machine learning platform. A security vulnerability exists in the TransposeConv operator in Google TensorFlow. No details of the vulnerability are provided at this time...

7.8CVSS5.5AI score0.00201EPSS
SaveExploits1References3
Rows per page
Query Builder