CVE-2021-37682

TensorFlow is an end-to-end open source platform for machine learning. In affected versions all TFLite operations that use quantization can be made to use unitialized values. For example. The issue stems from the fact that quantization.params is only valid if quantization.type is different that...

CVE-2021-37682

TensorFlow is an end-to-end open source platform for machine learning. In affected versions all TFLite operations that use quantization can be made to use unitialized values. For example. The issue stems from the fact that quantization.params is only valid if quantization.type is different that...

CVE-2021-37682

CVE-2021-37682 concerns TensorFlow/TFLite quantization paths where quantization.params may be used without validating quantization.type, allowing potential use of uninitialized values in affected TFLite operations. Connected sources confirm the root cause (missing checks in depthwise conv quantiz...