208 matches found
CVE-2022-23557
Tensorflow is an Open Source Machine Learning Framework. An attacker can craft a TFLite model that would trigger a division by zero in BiasAndClamp implementation. There is no check that the biassize is non zero. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on...
Google TensorFlow 数字错误漏洞
Google TensorFlow is an end-to-end open source platform for machine learning from Google, Inc. A numerical error vulnerability exists in Google Tensorflow, which could be exploited by an attacker to create a TFLite model that triggers a division in the "BiasAndClamp" implementation. The...
PT-2022-16072 · Google · Tensorflow
Name of the Vulnerable Software and Affected Versions: TensorFlow versions prior to 2.8.0 TensorFlow versions 2.7.1, 2.6.3, and 2.5.3 are also affected Description: An attacker can craft a TFLite model that would trigger a division by zero in the BiasAndClamp implementation. There is no check tha...
Friday Squid Blogging: Best Squid-Related Headline
From the New York Times: "When an Eel Climbs a Ramp to Eat Squid From a Clamp, Thats a Moray." The article is about the eel; the squid is just eel food. But still…. As usual, you can also use this squid post to talk about the security stories in the news that I haven’t covered. Read my blog posti...
Schweitzer Engineering Laboratories DC Analog Output Module Detection
Binary data 755361.prm...
FFmpeg vc1_put_blocks_clamped function out-of-bounds access vulnerability
FFmpeg is a set of open source computer programs that can be used to record, convert digital audio and video to streams under the LGPL or GPL license. An array out-of-bounds access vulnerability exists in the vc1putblocksclamped function in libavcodec/vc1block.c in FFmpeg 4.0.1 when converting a...
CVE-2001-0026
CVE-2001-0026 affects rp-pppoe, a userspace PPPoE client. The issue occurs when a crafted TCP segment uses the Clamp MSS option with a zero-length option, which can cause the client to enter an infinite loop and drop the connection (denial of service). Mandrake/MDKSA-2000:084 notes versions prior...
