4026 matches found
PYSEC-2020-291
In TensorFlow Lite before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1, saved models in the flatbuffer format use a double indexing scheme: a model has a set of subgraphs, each subgraph has a set of operators and each operator has a set of input/output tensors. The flatbuffer format uses indice...
CVE-2020-15212
In TensorFlow Lite before versions 2.2.1 and 2.3.1, models using segment sum can trigger writes outside of bounds of heap allocated buffers by inserting negative elements in the segment ids tensor. Users having access to segmentidsdata can alter outputindex and then write to outside of outputdata...
CVE-2020-15207
CVE-2020-15207 affects TensorFlow Lite: negative indexing support uses ResolveAxis and only debug builds validate the converted index, allowing out-of-bounds access that can cause segfaults/data corruption. Affected: TensorFlow Lite before 1.15.4, 2.0.3, 2.1.2, 2.2.1, 2.3.1. Root cause: insuffici...
CVE-2020-15207
In tensorflow-lite before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1, to mimic Python's indexing with negative values, TFLite uses ResolveAxis to convert negative values to positive indices. However, the only check that the converted index is now valid is only present in debug builds. If the...
GHSA-HX2X-85GR-WRPQ Out of bounds access in tensorflow-lite
Impact In TensorFlow Lite models using segment sum can trigger writes outside of bounds of heap allocated buffers by inserting negative elements in the segment ids tensor:...
GHSA-CVPC-8PHH-8F45 Out of bounds access in tensorflow-lite
Impact In TensorFlow Lite, saved models in the flatbuffer format use a double indexing scheme: a model has a set of subgraphs, each subgraph has a set of operators and each operator has a set of input/output tensors. The flatbuffer format uses indices for the tensors, indexing into an array of...
Out of bounds access in tensorflow-lite
Impact In TensorFlow Lite, saved models in the flatbuffer format use a double indexing scheme: a model has a set of subgraphs, each subgraph has a set of operators and each operator has a set of input/output tensors. The flatbuffer format uses indices for the tensors, indexing into an array of...
GHSA-Q4QF-3FC6-8X34 Segfault and data corruption in tensorflow-lite
Impact To mimic Python's indexing with negative values, TFLite uses ResolveAxis to convert negative values to positive indices. However, the only check that the converted index is now valid is only present in debug builds:...
PT-2020-14282 · Google +1 · Tensorflow Lite +1
Name of the Vulnerable Software and Affected Versions: TensorFlow Lite versions prior to 1.15.4 TensorFlow Lite versions prior to 2.0.3 TensorFlow Lite versions prior to 2.1.2 TensorFlow Lite versions prior to 2.2.1 TensorFlow Lite versions prior to 2.3.1 Description: The issue arises from the us...
PT-2020-14278 · Google +1 · Tensorflow +1
Name of the Vulnerable Software and Affected Versions: TensorFlow versions prior to 1.15.4 TensorFlow versions prior to 2.0.3 TensorFlow versions prior to 2.1.2 TensorFlow versions prior to 2.2.1 TensorFlow versions prior to 2.3.1 Description: The issue arises from TensorFlow's attempt to mimic...
Exploit for CVE-2020-1472
ZeroLogon testing script A Python script that uses the Impack...
Exploit for CVE-2020-1472
ZeroLogon testing script A Python script that uses the Impack...
Fedora: Security Advisory for squid (FEDORA-2020-73af8655eb)
The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
libsndfile:sndfile_fuzzer: Negative-size-param in vfread
Project: https://github.com/libsndfile/libsndfile.git Detailed Report: https://oss-fuzz.com/testcase?key=4838501290606592 Project: libsndfile Fuzzing Engine: libFuzzer Fuzz Target: sndfilefuzzer Job Type: libfuzzerasanlibsndfile Platform Id: linux Crash Type: Negative-size-param Crash Address:...
DEBIAN-CVE-2020-8244
A buffer over-read vulnerability exists in bl 4.0.3, 3.0.1, 2.2.1, and 1.2.3 which could allow an attacker to supply user input even typed that if it ends up in consume argument and can become negative, the BufferList state can be corrupted, tricking it into exposing uninitialized memory via...
CVE-2020-8244
A buffer over-read vulnerability exists in bl 4.0.3, 3.0.1, 2.2.1, and 1.2.3 which could allow an attacker to supply user input even typed that if it ends up in consume argument and can become negative, the BufferList state can be corrupted, tricking it into exposing uninitialized memory via...
PT-2020-20053 · Buffer List +2 · Bl +2
Name of the Vulnerable Software and Affected Versions: bl versions prior to 4.0.3 bl versions prior to 3.0.1 bl versions prior to 2.2.1 bl versions prior to 1.2.3 Description: A buffer over-read issue exists that could allow an attacker to supply user input that corrupts the BufferList state,...
OSV-2020-1664 Negative-size-param in BaseMemStream<char const>::getChars
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25221 Crash type: Negative-size-param Crash state: BaseMemStream::getChars Stream::doGetChars Stream::fillString...
poppler:pdf_fuzzer: Negative-size-param in BaseMemStream<char const>::getChars
Project: https://anongit.freedesktop.org/git/poppler/poppler.git https://gitlab.freedesktop.org/poppler/poppler.git https://gitlab.freedesktop.org/ceyhunalp/poppler.git Detailed Report: https://oss-fuzz.com/testcase?key=5102286278492160 Project: poppler Fuzzing Engine: libFuzzer Fuzz Target:...