Denial Of Service (DoS)

tensorflow is vulnerable to denial of service. The vulnerability is due to the DynamicStitch operation in the FingerprintCat128 function of execute.cc, which does not properly match the op input sizes, allowing an attacker to crash the application...

Out of bounds segmentation fault due to unequal op inputs in Tensorflow

Impact tf.rawops.DynamicStitch specifies input sizes when it is registered. cpp REGISTEROP"DynamicStitch" .Input"indices: N int32" .Input"data: N T" .Output"merged: T" .Attr"N : int = 1" .Attr"T : type" .SetShapeFnDynamicStitchShapeFunction; When it receives a differing number of inputs, such as...

PT-2022-26114

Name of the Vulnerable Software and Affected Versions TensorFlow versions prior to 2.11 TensorFlow version 2.10.1 TensorFlow version 2.9.3 TensorFlow version 2.8.4 Description The issue occurs when ops with specified input sizes receive a differing number of inputs, causing the executor to crash...