CVE-2022-36018

TensorFlow is an open source platform for machine learning. If RaggedTensorToVariant is given a rtnestedsplits list that contains tensors of ranks other than one, it results in a CHECK fail that can be used to trigger a denial of service attack. We have patched the issue in GitHub commit...

CVE-2022-36018 `CHECK` fail in `RaggedTensorToVariant` in TensorFlow

TensorFlow is an open source platform for machine learning. If RaggedTensorToVariant is given a rtnestedsplits list that contains tensors of ranks other than one, it results in a CHECK fail that can be used to trigger a denial of service attack. We have patched the issue in GitHub commit...

CVE-2022-36018

TensorFlow CVE-2022-36018 describes a denial-of-service risk in RaggedTensorToVariant when rt_nested_splits contains tensors with ranks other than one. The issue triggers a CHECK failure that can be exploited remotely to disrupt service. A fix was committed (88f93dfe691563baa4ae1e80ccde2d5c7a1438...