TensorFlow vulnerable to `CHECK` fail in `AvgPoolGrad`

ImpactThe implementation of AvgPoolGrad does not fully validate the input originputshape. This results in a CHECK failure which can be used to trigger a denial of service attack:pythonimport tensorflow as tfksize = 1, 2, 2, 1strides = 1, 2, 2, 1padding = "VALID"dataformat = "NHWC"originputshape =...

PYSEC-2026-3380 TensorFlow vulnerable to `CHECK` failures in `AvgPool3DGrad`

Impact The implementation of AvgPool3DGradOp does not fully validate the input originputshape. This results in an overflow that results in a CHECK failure which can be used to trigger a denial of service attack: python import tensorflow as tf ksize = 1, 1, 1, 1, 1 strides = 1, 1, 1, 1, 1 padding ...

Denial Of Service (DoS)

tensorflow is vulnerable to denial of service. The vulnerability exists in Compute function of poolingops3d.cc because it doesn't properly validate the originputshape input which allows an attacker to bypass inputs which result in a check failure causing an application crash...

CVE-2022-35968

TensorFlow is an open source platform for machine learning. The implementation of "AvgPoolGrad" does not fully validate the input "originputshape". This results in a "CHECK" failure which can be used to trigger a denial of service attack. We have patched the issue in GitHub commit...

CVE-2021-29577: Improper Restriction of Operations within the Bounds of a Memory Buffer

TensorFlow is an end-to-end open source platform for machine learning. The implementation of tf.rawops.AvgPool3DGrad is vulnerable to a heap buffer overflow. The...