PYSEC-2021-628

TensorFlow is an open source platform for machine learning. In affected versions the code for sparse matrix multiplication is vulnerable to undefined behavior via binding a reference to nullptr. This occurs whenever the dimensions of a or b are 0 or less. In the case on one of these is 0, an empt...

PYSEC-2021-411

TensorFlow is an open source platform for machine learning. In affected versions the code for sparse matrix multiplication is vulnerable to undefined behavior via binding a reference to nullptr. This occurs whenever the dimensions of a or b are 0 or less. In the case on one of these is 0, an empt...

CVE-2021-41219

TensorFlow is an open source platform for machine learning. In affected versions the code for sparse matrix multiplication is vulnerable to undefined behavior via binding a reference to nullptr. This occurs whenever the dimensions of a or b are 0 or less. In the case on one of these is 0, an empt...

CVE-2021-41224

TensorFlow is an open source platform for machine learning. In affected versions the implementation of SparseFillEmptyRows can be made to trigger a heap OOB access. This occurs whenever the size of indices does not match the size of values. The fix will be included in TensorFlow 2.7.0. We will al...

libredwg:llvmfuzz: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5804251180302336 Project: libredwg Fuzzing Engine: libFuzzer Fuzz Target: llvmfuzz Job Type: libfuzzerubsanlibredwg Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000000319cb2 Crash State: NULL Sanitizer: undefined UBSAN Recommended...

PT-2021-23181 · Google · Tensorflow

Name of the Vulnerable Software and Affected Versions: TensorFlow versions prior to 2.7.0 TensorFlow version 2.6.1 TensorFlow version 2.5.2 TensorFlow version 2.4.4 Description: The implementations for convolution operators in TensorFlow trigger a division by 0 if passed empty filter tensor...

CVE-2021-41209: Divide By Zero

TensorFlow is an open source platform for machine learning. In affected versions the implementations for convolution operators trigger a division by 0 if passed empty filter tensor arguments. The fix will be included in TensorFlow 2.7.0. We will also cherrypick this commit on TensorFlow 2.6.1,...

PT-2021-7387 · Vim +6 · Vim +6

Name of the Vulnerable Software and Affected Versions: Vim affected versions not specified Description: The issue is related to the spell iswordp function in the spell.c component of the Vim text editor, which lacks a check for an empty preword. This allows an attacker to access confidential data...

apache-httpd:fuzz_preq: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5130139780907008 Project: apache-httpd Fuzzing Engine: libFuzzer Fuzz Target: fuzzpreq Job Type: libfuzzerubsanapache-httpd Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000001422a29 Crash State: NULL Sanitizer: undefined UBSAN...

envoy:h2_capture_direct_response_persistent_fuzz_test: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5755034327973888 Project: envoy Fuzzing Engine: libFuzzer Fuzz Target: h2capturedirectresponsepersistentfuzztest Job Type: libfuzzerasanenvoy Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7fc03773cda0 Crash State: NULL Sanitizer:...

frr:zebra: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6383420666675200 Project: frr Fuzzing Engine: libFuzzer Fuzz Target: zebra Job Type: libfuzzerubsanfrr Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000000020202 Crash State: NULL Sanitizer: undefined UBSAN Recommended Security...

CLSA-2021-1634922588 Fixed CVE-2021-28153 in glib2

Fixed CVE-2021-28153: gfilereplace with GFILECREATEREPLACEDESTINATION creates empty target for dangling symlink...

pcapplusplus:FuzzTarget: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=4541260203950080 Project: pcapplusplus Fuzzing Engine: libFuzzer Fuzz Target: FuzzTarget Job Type: libfuzzerubsanpcapplusplus Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x00003d0d8a06 Crash State: NULL Sanitizer: undefined UBSAN...

BELL-CVE-2021-35604 CVE-2021-35604 does not affect BellSoft software

Bulletin has no description...

golang-protobuf:textfuzz: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6023180435718144 Project: golang-protobuf Fuzzing Engine: libFuzzer Fuzz Target: textfuzz Job Type: libfuzzerasangolang-protobuf Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0xffffffffffffffff Crash State: NULL Sanitizer: address AS...

cascadia:fuzz: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5621539505045504 Project: cascadia Fuzzing Engine: libFuzzer Fuzz Target: fuzz Job Type: libfuzzerasancascadia Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x00010e49b362 Crash State: NULL Sanitizer: address ASAN Recommended Securit...

frr:zebra: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=4935184605118464 Project: frr Fuzzing Engine: libFuzzer Fuzz Target: zebra Job Type: libfuzzerubsanfrr Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000002020202 Crash State: NULL Sanitizer: undefined UBSAN Recommended Security...

qemu:qemu-fuzz-i386-target-generic-fuzz-virtio-9p-synth: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6397171004473344 Project: qemu Fuzzing Engine: libFuzzer Fuzz Target: qemu-fuzz-i386-target-generic-fuzz-virtio-9p-synth Job Type: libfuzzerubsanqemu Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x296c6c756e28 Crash State: NULL...

rdkit:smiles_string_to_mol_fuzzer: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6739763583909888 Project: rdkit Fuzzing Engine: libFuzzer Fuzz Target: smilesstringtomolfuzzer Job Type: libfuzzermsanrdkit Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x002900000028 Crash State: NULL Sanitizer: memory MSAN...

assimp:assimp_fuzzer: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=4885852291989504 Project: assimp Fuzzing Engine: libFuzzer Fuzz Target: assimpfuzzer Job Type: libfuzzerubsanassimp Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7ffc2fbada48 Crash State: NULL Sanitizer: undefined UBSAN Recommended...