EUVD-2021-0411

Malware in sbrugna...

Heap OOB in TFLite

Impact TFLite's expanddims.cc contains a vulnerability which allows reading one element outside of bounds of heap allocated data: cc if axis size; ++i if i datai = inputdims.datai; else if i == axis outputdims-datai = 1; else outputdims-datai = inputdims.datai - 1; If axis is a large negative val...

Google TensorFlow TFLite Information Disclosure Vulnerability

Google TensorFlow is an end-to-end open source machine learning platform. An information disclosure vulnerability exists in Google TensorFlow TFLite. The vulnerability is due to a heap out-of-bounds read flaw in expanddims.cc in TFLite, which can be exploited by an attacker to obtain sensitive...

Out-of-bounds

TensorFlow is an end-to-end open source platform for machine learning. In affected versions TFLite's expanddims.cc contains a vulnerability which allows reading one element outside of bounds of heap allocated data. If axis is a large negative value e.g., -100000, then after the first if it would...