Lucene search
+L

26 matches found

OSV
OSV
added 2022/02/10 12:20 a.m.16 views

GHSA-98J8-C9Q4-R38G Memory exhaustion in Tensorflow

Impact The implementation of StringNGrams can be used to trigger a denial of service attack by causing an OOM condition after an integer overflow: python import tensorflow as tf tf.rawops.StringNGrams data='123456', datasplits=0,1, separator='a'15, ngramwidths=, leftpad='', rightpad='',...

5.3CVSS5.8AI score0.00828EPSS
SaveExploits1References7
Debian CVE
Debian CVE
added 2022/02/03 11:28 a.m.14 views

CVE-2022-21733

Tensorflow is an Open Source Machine Learning Framework. The implementation of StringNGrams can be used to trigger a denial of service attack by causing an out of memory condition after an integer overflow. We are missing a validation on padwitdh and that result in computing a negative value for...

6.5CVSS6.9AI score0.00828EPSS
SaveExploits1
OSV
OSV
added 2019/07/18 8:15 p.m.9 views

DEBIAN-CVE-2019-13962

lavcCopyPicture in modules/codec/avcodec/video.c in VideoLAN VLC media player through 3.0.7 has a heap-based buffer over-read because it does not properly validate the width and height...

9.8CVSS7.8AI score0.036EPSS
SaveExploits1References1
OSV
OSV
added 2019/07/18 12:00 a.m.13 views

UBUNTU-CVE-2019-13962

lavcCopyPicture in modules/codec/avcodec/video.c in VideoLAN VLC media player through 3.0.7 has a heap-based buffer over-read because it does not properly validate the width and height...

9.8CVSS7.3AI score0.036EPSS
SaveExploits1References3
Debian
Debian
added 2018/03/04 10:00 a.m.51 views

[SECURITY] [DSA 4132-1] libvpx security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4132-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff March 04, 2018 https://www.debian.org/security/faq -...

7.8CVSS7.7AI score0.01805EPSS
SaveExploits0
NVD
NVD
added 2017/06/28 6:29 a.m.32 views

CVE-2017-9995

libavcodec/scpr.c in FFmpeg 3.3 before 3.3.1 does not properly validate height and width data, which allows remote attackers to cause a denial of service heap-based buffer overflow and application crash or possibly have unspecified other impact via a crafted file...

7.8CVSS8.2AI score0.01574EPSS
SaveExploits0References5
Rows per page
Query Builder