Lucene search
+L

1185 matches found

Github Security Blog
Github Security Blog
•added 2022/02/09 11:53 p.m.•54 views

Out of bounds write in TFLite

Impact An attacker can craft a TFLite model that would cause a write outside of bounds of an array in TFLite. In fact, the attacker can override the linked list used by the memory allocator. This can be leveraged for an arbitrary write primitive under certain conditions. Patches We have patched t...

8.8CVSS3.5AI score0.00544EPSS
SaveExploits0References6Affected Software3
OSV
OSV
•added 2022/02/09 11:53 p.m.•18 views

GHSA-9C78-VCQ7-7VXQ Out of bounds write in TFLite

Impact An attacker can craft a TFLite model that would cause a write outside of bounds of an array in TFLite. In fact, the attacker can override the linked list used by the memory allocator. This can be leveraged for an arbitrary write primitive under certain conditions. Patches We have patched t...

8.8CVSS7.2AI score0.00544EPSS
SaveExploits0References6
NVD
NVD
•added 2022/02/04 11:15 p.m.•54 views

CVE-2022-23561

Tensorflow is an Open Source Machine Learning Framework. An attacker can craft a TFLite model that would cause a write outside of bounds of an array in TFLite. In fact, the attacker can override the linked list used by the memory allocator. This can be leveraged for an arbitrary write primitive...

8.8CVSS0.00544EPSS
SaveExploits0References2
PyPA
PyPA
•added 2022/02/04 11:15 p.m.•11 views

PYSEC-2022-125

Tensorflow is an Open Source Machine Learning Framework. An attacker can craft a TFLite model that would cause a write outside of bounds of an array in TFLite. In fact, the attacker can override the linked list used by the memory allocator. This can be leveraged for an arbitrary write primitive...

8.8CVSS7.1AI score0.00544EPSS
SaveExploits0References2Affected Software1
Prion
Prion
•added 2022/02/04 11:15 p.m.•26 views

Out-of-bounds

Tensorflow is an Open Source Machine Learning Framework. An attacker can craft a TFLite model that would cause a write outside of bounds of an array in TFLite. In fact, the attacker can override the linked list used by the memory allocator. This can be leveraged for an arbitrary write primitive...

6.5CVSS8.7AI score0.00544EPSS
SaveExploits0References2Affected Software1
PyPA
PyPA
•added 2022/02/04 11:15 p.m.•13 views

PYSEC-2022-70

Tensorflow is an Open Source Machine Learning Framework. An attacker can craft a TFLite model that would cause a write outside of bounds of an array in TFLite. In fact, the attacker can override the linked list used by the memory allocator. This can be leveraged for an arbitrary write primitive...

8.8CVSS7.1AI score0.00544EPSS
SaveExploits0References2Affected Software1
OSV
OSV
•added 2022/02/04 11:15 p.m.•16 views

PYSEC-2022-70

Tensorflow is an Open Source Machine Learning Framework. An attacker can craft a TFLite model that would cause a write outside of bounds of an array in TFLite. In fact, the attacker can override the linked list used by the memory allocator. This can be leveraged for an arbitrary write primitive...

8.8CVSS3.4AI score0.00544EPSS
SaveExploits0References2
OSV
OSV
•added 2022/02/04 11:15 p.m.•10 views

PYSEC-2022-125

Tensorflow is an Open Source Machine Learning Framework. An attacker can craft a TFLite model that would cause a write outside of bounds of an array in TFLite. In fact, the attacker can override the linked list used by the memory allocator. This can be leveraged for an arbitrary write primitive...

8.8CVSS7.3AI score0.00544EPSS
SaveExploits0References2
CVE
CVE
•added 2022/02/04 10:32 p.m.•135 views

CVE-2022-23561

CVE-2022-23561 affects TensorFlow’s TFLite, enabling out-of-bounds writes by crafting a TFLite model that can corrupt the memory allocator’s linked list. This vulnerability allows an arbitrary write primitive under certain conditions as described in the CVE description. Affected details in connec...

8.8CVSS8.7AI score0.00544EPSS
SaveExploits0References2Affected Software1
Debian CVE
Debian CVE
•added 2022/02/04 10:32 p.m.•26 views

CVE-2022-23561

Tensorflow is an Open Source Machine Learning Framework. An attacker can craft a TFLite model that would cause a write outside of bounds of an array in TFLite. In fact, the attacker can override the linked list used by the memory allocator. This can be leveraged for an arbitrary write primitive...

8.8CVSS7.1AI score0.00544EPSS
SaveExploits0
Cvelist
Cvelist
•added 2022/02/04 10:32 p.m.•55 views

CVE-2022-23561 Out of bounds write in TFLite

Tensorflow is an Open Source Machine Learning Framework. An attacker can craft a TFLite model that would cause a write outside of bounds of an array in TFLite. In fact, the attacker can override the linked list used by the memory allocator. This can be leveraged for an arbitrary write primitive...

8.8CVSS9AI score0.00544EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2022/02/04 10:32 p.m.•5 views

CVE-2022-23561 Out of bounds write in TFLite

Tensorflow is an Open Source Machine Learning Framework. An attacker can craft a TFLite model that would cause a write outside of bounds of an array in TFLite. In fact, the attacker can override the linked list used by the memory allocator. This can be leveraged for an arbitrary write primitive...

8.8CVSS8.8AI score0.00544EPSS
SaveExploits0References2
OSV
OSV
•added 2022/02/04 10:32 p.m.•42 views

CVE-2022-23561 Out of bounds write in TFLite

Tensorflow is an Open Source Machine Learning Framework. An attacker can craft a TFLite model that would cause a write outside of bounds of an array in TFLite. In fact, the attacker can override the linked list used by the memory allocator. This can be leveraged for an arbitrary write primitive...

8.8CVSS8.6AI score
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/02/04 12:00 a.m.•3 views

CVE-2022-23561: Out-of-bounds Write

Tensorflow is an Open Source Machine Learning Framework. An attacker can craft a TFLite model that would cause a write outside of bounds of an array in TFLite. In fact, the attacker can override the linked list used by the memory allocator. This can be leveraged for an arbitrary write primitive...

8.8CVSS7.8AI score0.00544EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2022/02/04 12:00 a.m.•8 views

PT-2022-16077

Name of the Vulnerable Software and Affected Versions TensorFlow versions prior to 2.8.0 TensorFlow versions prior to 2.7.1 TensorFlow versions prior to 2.6.3 TensorFlow versions prior to 2.5.3 Description An attacker can craft a TFLite model to cause a write outside the bounds of an array in...

8.8CVSS8.5AI score0.00544EPSS
SaveExploits0References15
Tenable Nessus
Tenable Nessus
•added 2022/01/14 12:00 a.m.•63 views

Fortinet FortiOS Integer Overflow (FG-IR-21-049)

The remote host is running a version of FortiOS prior or equal to 6.0.12, 6.2.x prior or equal to 6.2.9, 6.4.x prior or equal to 6.4.5 or 7.0.0. It is, therefore, affected by an integer overflow vulnerability in FortiOS SSLVPN memory allocator may allow an unauthenticated attacker to corrupt...

9.8CVSS8.7AI score0.01883EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2021/12/15 7:15 p.m.•9 views

CVE-2021-0968

In osimalloc and osicalloc of allocator.cc, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11...

8.8CVSS8.4AI score0.00651EPSS
SaveExploits0References2
Prion
Prion
•added 2021/12/15 7:15 p.m.•30 views

Integer overflow

In osimalloc and osicalloc of allocator.cc, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11...

6.8CVSS8.2AI score0.00651EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2021/12/15 6:05 p.m.•37 views

CVE-2021-0968

In osimalloc and osicalloc of allocator.cc, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11...

9.1AI score0.00651EPSS
SaveExploits0References1
CVE
CVE
•added 2021/12/15 6:05 p.m.•153 views

CVE-2021-0968

CVE-2021-0968 affects Android 9–12. The issue is an out-of-bounds write caused by an integer overflow in allocator.cc (osi_malloc/osi_calloc), potentially enabling remote code execution with no user interaction. Public details indicate patch levels for 2021-12-01/2021-12-05 Android Bulletins addr...

8.8CVSS8.5AI score0.00651EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder