CVE-2021-37649

TensorFlow is an end-to-end open source platform for machine learning. The code for tf.rawops.UncompressElement can be made to trigger a null pointer dereference. The implementation obtains a pointer to a CompressedElement from a Variant tensor and then proceeds to dereference it for decompressin...

CVE-2021-37649

CVE-2021-37649 describes a null pointer dereference in tf.raw_ops.UncompressElement within TensorFlow. The issue arises when a Variant tensor does not actually contain a CompressedElement, leading to a nullptr dereference during decompression. A patch has been applied in GitHub commit 7bdf50bb4f5...

CVE-2021-37649 Null pointer dereference in `UncompressElement` in TensorFlow

TensorFlow is an end-to-end open source platform for machine learning. The code for tf.rawops.UncompressElement can be made to trigger a null pointer dereference. The implementation obtains a pointer to a CompressedElement from a Variant tensor and then proceeds to dereference it for decompressin...