Google TensorFlow input_splits tensor code execution vulnerability

Google TensorFlow is an end-to-end open source platform for machine learning from Google. Google TensorFlow inputsplits tensor has a code execution vulnerability that could be exploited by attackers to execute arbitrary code on the system...

CVE-2021-37667

TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can cause undefined behavior via binding a reference to null pointer in tf.rawops.UnicodeEncode. The implementation reads the first dimension of the inputsplits tensor before validating that th...