PT-2021-21811 · Google · Tensorflow

Name of the Vulnerable Software and Affected Versions: TensorFlow versions prior to 2.6.0 TensorFlow versions 2.5.1 and earlier TensorFlow versions 2.4.3 and earlier TensorFlow versions 2.3.4 and earlier Description: An attacker can craft a TFLite model that would trigger a division by zero error...

The vulnerability of the coders/jp2.c file, a program set for reading and editing ImageMagisk files, stems from the lack of zero-division checking. This allows an attacker to trigger a service failure.

The vulnerability of the coders/jp2.c file, a program set for reading and editing ImageMagisk files, is related to the lack of checks for division by zero. Exploiting this vulnerability could allow an attacker, operating remotely, to cause service failures...

The vulnerability of the gem.c file, a program for reading and editing ImageMagisk files, relates to the lack of zero-division checking. This allows an attacker to trigger a service failure.

The vulnerability of the gem.c file, a program for reading and editing ImageMagisk files, is related to the lack of checks for division by zero. Exploiting this vulnerability could allow an attacker to cause service interruptions...

GHSA-PMPR-55FJ-R229 Division by zero in TFLite's implementation of `SVDF`

Impact The implementation of the SVDF TFLite operator is vulnerable to a division by zero error: cc const int rank = params-rank; ... TFLITEENSUREEQcontext, numfilters % rank, 0; An attacker can craft a model such that params-rank would be 0. Patches We have patched the issue in GitHub commit...

CVE-2021-29549

TensorFlow is an end-to-end open source platform for machine learning. An attacker can cause a runtime division by zero error and denial of service in tf.rawops.QuantizedBatchNormWithGlobalNormalization. This is because the...

PYSEC-2021-236

TensorFlow is an end-to-end open source platform for machine learning. The implementation of the Split TFLite operator is vulnerable to a division by zero errorhttps://github.com/tensorflow/tensorflow/blob/e2752089ef7ce9bcf3db0ec618ebd23ea119d0c7/tensorflow/lite/kernels/split.ccL63-L65. An attack...

PYSEC-2021-235

TensorFlow is an end-to-end open source platform for machine learning. The implementation of the SVDF TFLite operator is vulnerable to a division by zero errorhttps://github.com/tensorflow/tensorflow/blob/7f283ff806b2031f407db64c4d3edcda8fb9f9f5/tensorflow/lite/kernels/svdf.ccL99-L102. An attacke...

PYSEC-2021-672

TensorFlow is an end-to-end open source platform for machine learning. An attacker can trigger an integer division by zero undefined behavior in tf.rawops.QuantizedBiasAdd. This is because the implementation of the Eigen...

PYSEC-2021-713

TensorFlow is an end-to-end open source platform for machine learning. The Prepare step of the SpaceToDepth TFLite operator does not check for 0 before divisionhttps://github.com/tensorflow/tensorflow/blob/5f7975d09eac0f10ed8a17dbb6f5964977725adc/tensorflow/lite/kernels/spacetodepth.ccL63-L67. An...

CVE-2021-29546

TensorFlow is an end-to-end open source platform for machine learning. An attacker can trigger an integer division by zero undefined behavior in tf.rawops.QuantizedBiasAdd. This is because the implementation of the Eigen...

PT-2021-18345 · Google · Tensorflow

Name of the Vulnerable Software and Affected Versions: TensorFlow versions prior to 2.5.0 TensorFlow versions 2.4.2 and earlier TensorFlow versions 2.3.3 and earlier TensorFlow versions 2.2.3 and earlier TensorFlow versions 2.1.4 and earlier Description: The issue arises from the convolution code...

The vulnerability of the libjpeg library, related to zero-division errors, allows a hacker to cause a service failure.

The vulnerability of the libjpeg library is related to errors during division by zero. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of the setup_format_params() function in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the setupformatparams function in the Linux operating system is related to zero-division errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the DGifSlurp function (dgif_lib.c) in the GIF file handling library GIFLIB allows a hacker to induce a service failure.

The vulnerability of the DGifSlurp function dgiflib.c in the GIF file handling library GIFLIB is related to zero-division errors. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

CVE-2019-16168

In SQLite through 3.29.0, whereLoopAddBtreeIndex in sqlite3.c can crash a browser or other application because of missing validation of a sqlitestat1 sz field, aka a "severe division by zero in the query planner."...

The vulnerability in the dwarf_elf_load_headers.c component of the library for providing access to debugging information in DWARF libdwarf, which allows a malicious actor to cause a service failure.

The vulnerability of the dwarfelfloadheaders.c component in the library that provides access to debugging information in DWARF libdwarf is related to zero-division errors. Exploiting this vulnerability could allow a malicious actor to cause service failures using an ELF file...

The vulnerability of the `usbnet_generic_cdc_bind` function (drivers/net/usb/cdc_ether.c) in the Linux kernel allows a attacker to cause a service failure or exert other effects.

The vulnerability of the usbnetgenericcdcbind function located in the drivers/net/usb/cdcether.c file in the Linux kernel arises due to errors during the zero-division operation. Exploitation of this vulnerability can allow an attacker, operating locally, to cause service failures or other effect...

The vulnerability of the qmi_wwanbind function (drivers/net/usb/qmi_wwan.c) in the Linux kernel allows a attacker to cause a service failure or exert other effects.

The vulnerability of the qmiwwanbind function drivers/net/usb/qmiwwan.c in the Linux kernel arises due to errors during the execution of the zero-division operation. Exploiting this vulnerability can allow a local attacker to cause service failures or other effects by using a specially crafted US...

ALPINE-CVE-2016-3623

The rgb2ycbcr tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service divide-by-zero by setting the 1 v or 2 h parameter to 0...

The vulnerability of the Linux operating system, which allows a malicious individual to trigger a service failure

The zero-division state allows the guest user to trigger a service failure on the host emergency termination of operations...