Lucene search
+L

584 matches found

OSV
OSV
added 2021/05/14 8:15 p.m.8 views

PYSEC-2021-163

TensorFlow is an end-to-end open source platform for machine learning. An attacker can trigger a division by 0 in tf.rawops.Conv2D. This is because the implementationhttps://github.com/tensorflow/tensorflow/blob/988087bd83f144af14087fe4fecee2d250d93737/tensorflow/core/kernels/convops.ccL261-L263...

5.5CVSS6.1AI score0.00198EPSS
SaveExploits1References2
OSV
OSV
added 2021/05/14 8:15 p.m.17 views

PYSEC-2021-244

TensorFlow is an end-to-end open source platform for machine learning. Incomplete validation in SparseAdd results in allowing attackers to exploit undefined behavior dereferencing null pointers as well as write outside of bounds of heap allocated data. The...

7.8CVSS7.1AI score0.00234EPSS
SaveExploits1References3
OSV
OSV
added 2021/05/14 8:15 p.m.10 views

PYSEC-2021-725

TensorFlow is an end-to-end open source platform for machine learning. The implementation of the Split TFLite operator is vulnerable to a division by zero errorhttps://github.com/tensorflow/tensorflow/blob/e2752089ef7ce9bcf3db0ec618ebd23ea119d0c7/tensorflow/lite/kernels/split.ccL63-L65. An attack...

7.8CVSS5.9AI score0.00209EPSS
SaveExploits1References2
PyPA
PyPA
added 2021/05/14 8:15 p.m.11 views

PYSEC-2021-507

TensorFlow is an end-to-end open source platform for machine learning. The implementation of tf.rawops.MaxPoolGrad is vulnerable to a heap buffer overflow. The...

7.8CVSS7.3AI score0.00214EPSS
SaveExploits1References2Affected Software1
OSV
OSV
added 2021/05/14 8:15 p.m.11 views

PYSEC-2021-255

TensorFlow is an end-to-end open source platform for machine learning. Passing a complex argument to tf.transpose at the same time as passing conjugate=True argument results in a crash. The fix will be included in TensorFlow 2.5.0. We will also cherrypick this commit on TensorFlow 2.4.2, TensorFl...

5.5CVSS6.1AI score0.0023EPSS
SaveExploits1References4
PyPA
PyPA
added 2021/05/14 8:15 p.m.13 views

PYSEC-2021-223

TensorFlow is an end-to-end open source platform for machine learning. Optimized pooling implementations in TFLite fail to check that the stride arguments are not 0 before calling...

7.8CVSS6.9AI score0.00201EPSS
SaveExploits1References2Affected Software1
PyPA
PyPA
added 2021/05/14 8:15 p.m.12 views

PYSEC-2021-490

TensorFlow is an end-to-end open source platform for machine learning. An attacker can cause a denial of service by exploiting a CHECK-failure coming from the implementation of tf.rawops.IRFFT. The fix will be included in TensorFlow 2.5.0. We will also cherrypick this commit on TensorFlow 2.4.2,...

5.5CVSS6.8AI score0.00189EPSS
SaveExploits1References2Affected Software1
PyPA
PyPA
added 2021/05/14 8:15 p.m.11 views

PYSEC-2021-249

TensorFlow is an end-to-end open source platform for machine learning. An attacker can trigger a heap buffer overflow in Eigen implementation of tf.rawops.BandedTriangularSolve. The...

7.8CVSS7.5AI score0.00287EPSS
SaveExploits1References3Affected Software1
PyPA
PyPA
added 2021/05/14 8:15 p.m.9 views

PYSEC-2021-533

TensorFlow is an end-to-end open source platform for machine learning. The TFLite code for allocating TFLiteIntArrays is vulnerable to an integer overflow issuehttps://github.com/tensorflow/tensorflow/blob/4ceffae632721e52bf3501b736e4fe9d1221cdfa/tensorflow/lite/c/common.cL24-L27. An attacker can...

7.1CVSS7.4AI score0.0022EPSS
SaveExploits1References2Affected Software1
PyPA
PyPA
added 2021/05/14 8:15 p.m.9 views

PYSEC-2021-744

TensorFlow is an end-to-end open source platform for machine learning. Passing a complex argument to tf.transpose at the same time as passing conjugate=True argument results in a crash. The fix will be included in TensorFlow 2.5.0. We will also cherrypick this commit on TensorFlow 2.4.2, TensorFl...

5.5CVSS6.9AI score0.0023EPSS
SaveExploits1References4Affected Software1
PyPA
PyPA
added 2021/05/14 8:15 p.m.11 views

PYSEC-2021-208

TensorFlow is an end-to-end open source platform for machine learning. The implementation of tf.rawops.MaxPoolGradWithArgmax can cause reads outside of bounds of heap allocated data if attacker supplies specially crafted inputs. The...

7.8CVSS7.7AI score0.0024EPSS
SaveExploits1References2Affected Software1
PyPA
PyPA
added 2021/05/14 8:15 p.m.14 views

PYSEC-2021-465

TensorFlow is an end-to-end open source platform for machine learning. An attacker can cause a heap buffer overflow in QuantizedResizeBilinear by passing in invalid thresholds for the quantization. This is because the...

7.8CVSS7.4AI score0.00211EPSS
SaveExploits1References2Affected Software1
PyPA
PyPA
added 2021/05/14 8:15 p.m.10 views

PYSEC-2021-726

TensorFlow is an end-to-end open source platform for machine learning. The implementation of the OneHot TFLite operator is vulnerable to a division by zero errorhttps://github.com/tensorflow/tensorflow/blob/f61c57bd425878be108ec787f4d96390579fb83e/tensorflow/lite/kernels/onehot.ccL68-L72. An...

7.8CVSS6.9AI score0.00201EPSS
SaveExploits1References2Affected Software1
PyPA
PyPA
added 2021/05/14 8:15 p.m.10 views

PYSEC-2021-452

TensorFlow is an end-to-end open source platform for machine learning. An attacker can trigger a division by 0 in tf.rawops.Conv2DBackpropFilter. This is because the...

5.5CVSS7AI score0.00189EPSS
SaveExploits1References2Affected Software1
PyPA
PyPA
added 2021/05/14 8:15 p.m.10 views

PYSEC-2021-469

TensorFlow is an end-to-end open source platform for machine learning. An attacker can trigger a dereference of a null pointer in tf.rawops.StringNGrams. This is because the...

5.5CVSS6.9AI score0.00189EPSS
SaveExploits1References2Affected Software1
PyPA
PyPA
added 2021/05/14 8:15 p.m.12 views

PYSEC-2021-654

TensorFlow is an end-to-end open source platform for machine learning. An attacker can trigger a division by 0 in tf.rawops.QuantizedMul. This is because the...

5.5CVSS7AI score0.00189EPSS
SaveExploits1References2Affected Software1
PyPA
PyPA
added 2021/05/14 8:15 p.m.9 views

PYSEC-2021-538

TensorFlow is an end-to-end open source platform for machine learning. The validation in tf.rawops.QuantizeAndDequantizeV2 allows invalid values for axis argument:. The...

7.8CVSS7AI score0.00201EPSS
SaveExploits1References2Affected Software1
PyPA
PyPA
added 2021/05/14 8:15 p.m.11 views

PYSEC-2021-173

TensorFlow is an end-to-end open source platform for machine learning. An attacker can cause a heap buffer overflow in QuantizedReshape by passing in invalid thresholds for the quantization. This is because the...

7.8CVSS7.4AI score0.00211EPSS
SaveExploits1References2Affected Software1
PyPA
PyPA
added 2021/05/14 8:15 p.m.11 views

PYSEC-2021-166

TensorFlow is an end-to-end open source platform for machine learning. An attacker can trigger a heap buffer overflow in tf.rawops.QuantizedResizeBilinear by manipulating input values so that float rounding results in off-by-one error in accessing image elements. This is because the...

7.8CVSS7.6AI score0.00251EPSS
SaveExploits1References2Affected Software1
PyPA
PyPA
added 2021/05/14 8:15 p.m.12 views

PYSEC-2021-474

TensorFlow is an end-to-end open source platform for machine learning. An attacker can trigger an integer division by zero undefined behavior in tf.rawops.QuantizedBiasAdd. This is because the implementation of the Eigen...

7.8CVSS6.9AI score0.00201EPSS
SaveExploits1References2Affected Software1
Rows per page
Query Builder