asc (>=0.1.0 <=0.3.1), cde (>=0.1.0 <=0.2.0.1) +28 more potentially affected by CVE-2018-10055 via tensorflow (>=1.1.0 <=1.7.0)

tensorflow PYPI version =1.1.0, =0.1.0, =0.1.0, =0.0.2, =1.0.4, =0.6.4, =0.9.0rc5, =0.0.1, =1.1.0, =0.6.0.2, =0.0.0.dev1, =2.0.4, =2.0.6 and more Source cves: CVE-2018-10055 Source advisory: OSV:GHSA-Q492-F7GR-27RP...

CVE-2018-10055

Invalid memory access and/or a heap buffer overflow in the TensorFlow XLA compiler in Google TensorFlow before 1.7.1 could cause a crash or read from other parts of process memory via a crafted configuration file...

abba-python (>=0.1.6 <=0.3.0), adpred (>=1.1.2 <=1.2.7) +360 more potentially affected by CVE-2018-10055 via tensorflow (>=1.0.1 <=1.7.0)

tensorflow PYPI version =1.0.1, =0.1.6, =1.1.2, =0.0.1, =0.3.26, =0.2.0, =0.3.1, =0.1.0, =0.4.2, =0.1.0, =0.4.0, =0.1.0, =0.3.1 and more Source cves: CVE-2018-10055 Source advisory: OSV:PYSEC-2019-204...

CVE-2018-10055

CVE-2018-10055 affects the TensorFlow XLA compiler in Google TensorFlow prior to 1.7.1. The issue is an invalid memory access and/or a heap buffer overflow triggered by a crafted configuration file, which could cause a crash or allow reading from other parts of process memory. Connected documents...