Lucene search
+L

2312 matches found

Cvelist
Cvelist
•added 2020/12/10 10:10 p.m.•59 views

CVE-2020-26266 Uninitialized memory access in Eigen types in TensorFlow

In affected versions of TensorFlow under certain cases a saved model can trigger use of uninitialized values during code execution. This is caused by having tensor buffers be filled with the default value of the type but forgetting to default initialize the quantized floating point types in Eigen...

4.4CVSS6AI score0.00261EPSS
SaveExploits1References2
Github Security Blog
Github Security Blog
•added 2020/12/10 7:07 p.m.•149 views

Uninitialized memory access in TensorFlow

Impact Under certain cases, a saved model can trigger use of uninitialized values during code execution. This is caused by having tensor buffers be filled with the default value of the type but forgetting to default initialize the quantized floating point types in Eigen: cc struct QUInt8 QUInt8 /...

5.3CVSS3.4AI score0.00261EPSS
SaveExploits1References7Affected Software3
CNNVD
CNNVD
•added 2020/12/10 12:00 a.m.•29 views

Google TensorFlow 缓冲区错误漏洞

Google TensorFlow is a suite of end-to-end open source platforms for machine learning from Google USA. Google TensorFlow suffers from a buffer overflow vulnerability that stems from a tensor buffer being populated with the default value for the type, but forgetting to initialize the quantized...

5.3CVSS6.5AI score0.00261EPSS
SaveExploits1References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/12/10 12:00 a.m.•7 views

CVE-2020-26266: Use of Uninitialized Resource

In affected versions of TensorFlow under certain cases a saved model can trigger use of uninitialized values during code execution. This is caused by having tensor buffers be filled with the default value of the type but forgetting to default initialize the quantized floating point types in Eigen...

5.3CVSS6AI score0.00261EPSS
SaveExploits1References3
NVD
NVD
•added 2020/12/08 10:15 p.m.•30 views

CVE-2020-27757

A floating point math calculation in ScaleAnyToQuantum of /MagickCore/quantum-private.h could lead to undefined behavior in the form of a value outside the range of type unsigned long long. The flaw could be triggered by a crafted input file under certain conditions when it is processed by...

4.3CVSS4.2AI score0.01085EPSS
SaveExploits1References3
Prion
Prion
•added 2020/12/08 10:15 p.m.•32 views

Design/Logic Flaw

A floating point math calculation in ScaleAnyToQuantum of /MagickCore/quantum-private.h could lead to undefined behavior in the form of a value outside the range of type unsigned long long. The flaw could be triggered by a crafted input file under certain conditions when it is processed by...

4.3CVSS3.5AI score0.01085EPSS
SaveExploits1References3Affected Software2
osv-ubuntu
osv-ubuntu
•added 2020/12/08 10:15 p.m.•13 views

UBUNTU-CVE-2020-27757

A floating point math calculation in ScaleAnyToQuantum of /MagickCore/quantum-private.h could lead to undefined behavior in the form of a value outside the range of type unsigned long long. The flaw could be triggered by a crafted input file under certain conditions when it is processed by...

3.3CVSS6.2AI score0.01085EPSS
SaveExploits1References3
UbuntuCve
UbuntuCve
•added 2020/12/08 10:15 p.m.•39 views

CVE-2020-27757

A floating point math calculation in ScaleAnyToQuantum of /MagickCore/quantum-private.h could lead to undefined behavior in the form of a value outside the range of type unsigned long long. The flaw could be triggered by a crafted input file under certain conditions when it is processed by...

4.3CVSS6.6AI score0.01085EPSS
SaveExploits1References2
Mend
Mend
•added 2020/12/08 12:00 a.m.•3 views

CVE-2020-27757

A floating point math calculation in ScaleAnyToQuantum of /MagickCore/quantum-private.h could lead to undefined behavior in the form of a value outside the range of type unsigned long long. The flaw could be triggered by a crafted input file under certain conditions when it is processed by...

4.8CVSS0.01085EPSS
SaveExploits1References7
CVE
CVE
•added 2020/12/08 12:00 a.m.•251 views

CVE-2020-27757

CVE-2020-27757 : In ImageMagick, a floating-point calculation in ScaleAnyToQuantum() (MagickCore/quantum-private.h) can overflow the range of unsigned long long, causing undefined behavior when processing crafted input files. Affected: ImageMagick versions prior to 7.0.8-68. Root cause: floating-...

4.3CVSS4.8AI score0.01085EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
•added 2020/12/08 12:00 a.m.•54 views

CVE-2020-27757

A floating point math calculation in ScaleAnyToQuantum of /MagickCore/quantum-private.h could lead to undefined behavior in the form of a value outside the range of type unsigned long long. The flaw could be triggered by a crafted input file under certain conditions when it is processed by...

5AI score0.01085EPSS
SaveExploits1References3
Debian CVE
Debian CVE
•added 2020/12/08 12:00 a.m.•56 views

CVE-2020-27757

A floating point math calculation in ScaleAnyToQuantum of /MagickCore/quantum-private.h could lead to undefined behavior in the form of a value outside the range of type unsigned long long. The flaw could be triggered by a crafted input file under certain conditions when it is processed by...

4.3CVSS5.1AI score0.01085EPSS
SaveExploits1
osv-debian
osv-debian
•added 2020/11/27 6:15 p.m.•7 views

DEBIAN-CVE-2020-25708

A divide by zero issue was found to occur in libvncserver-0.9.12. A malicious client could use this flaw to send a specially crafted message that, when processed by the VNC server, would lead to a floating point exception, resulting in a denial of service...

7.5CVSS7.6AI score0.01633EPSS
SaveExploits1References1
Mend
Mend
•added 2020/11/27 5:41 p.m.•4 views

CVE-2020-25708

A divide by zero issue was found to occur in libvncserver-0.9.12. A malicious client could use this flaw to send a specially crafted message that, when processed by the VNC server, would lead to a floating point exception, resulting in a denial of service...

8.7CVSS0.01633EPSS
SaveExploits1References6
AlpineLinux
AlpineLinux
•added 2020/11/27 5:41 p.m.•53 views

CVE-2020-25708

A divide by zero issue was found to occur in libvncserver-0.9.12. A malicious client could use this flaw to send a specially crafted message that, when processed by the VNC server, would lead to a floating point exception, resulting in a denial of service...

7.5CVSS7.4AI score0.01633EPSS
SaveExploits1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/11/27 12:00 a.m.•5 views

CVE-2020-25708: Divide By Zero

A divide by zero issue was found to occur in libvncserver-0.9.12. A malicious client could use this flaw to send a specially crafted message that, when processed by the VNC server, would lead to a floating point exception, resulting in a denial of service...

7.5CVSS7.7AI score0.01633EPSS
SaveExploits1References3
RedhatCVE
RedhatCVE
•added 2020/11/24 7:23 p.m.•30 views

CVE-2020-27757

A floating point math calculation in ScaleAnyToQuantum of /MagickCore/quantum-private.h could lead to undefined behavior in the form of a value outside the range of type unsigned long long. The flaw could be triggered by a crafted input file under certain conditions when it is processed by...

4.3CVSS1.8AI score0.01085EPSS
SaveExploits1References3
UbuntuCve
UbuntuCve
•added 2020/11/13 12:00 a.m.•28 views

CVE-2020-25708

A divide by zero issue was found to occur in libvncserver-0.9.12. A malicious client could use this flaw to send a specially crafted message that, when processed by the VNC server, would lead to a floating point exception, resulting in a denial of service...

7.5CVSS7.1AI score0.01633EPSS
SaveExploits1References3
Oracle linux
Oracle linux
•added 2020/11/10 12:00 a.m.•72 views

glibc security, bug fix, and enhancement update

2.28-127.0.1 - add Ampere emag to tunable cpu list Patrick McGehearty - add optimized memset for emag - add an ASIMD variant of strlen for falkor - Orabug: 2700101. - Modify glibc-ora28849085.patch so it works with RHCK kernels. - Orabug: 28849085. - Make IOfunlockfile match funlockfile and...

7CVSS0.5AI score0.00764EPSS
SaveExploits1
Positive Technologies
Positive Technologies
•added 2020/10/30 12:00 a.m.•4 views

PT-2023-29792

Name of the Vulnerable Software and Affected Versions gifsicle version 1.94 Description A floating point exception FPE issue was discovered in gifsicle through the resize stream function at src/xform.c. This issue can cause problems when processing certain inputs. Recommendations For gifsicle...

7.8CVSS0.00346EPSS
SaveExploits1References26
Rows per page
Query Builder