CVE-2021-29519

TensorFlow is an end-to-end open source platform for machine learning. The API of tf.rawops.SparseCross allows combinations which would result in a CHECK-failure and denial of service. This is because the...

CVE-2021-29519

TensorFlow vulnerability CVE-2021-29519 arises from a type-confusion in tf.raw_ops.SparseCross where a tstring input is treated as int64, enabling a CHECK-fail and potential DoS. The issue is rooted in SparseCross_op.cc logic that mishandles dtype, returning a fingerprint from a string when value...