EUVD-2021-0351

Malware in sbrugna...

Remote Code Execution (RCE)

tensorflow is vulnerable to Remote Code Execution RCE. The vulnerability is due to the QuantizeAndDequantizeV2/V3/V4/V4Grad functions in arrayops.cc, which allows heap out-of-buffer reads, possibly allowing an attacker to execute malicious code or crash the system...

CVE-2021-29610

TensorFlow is an end-to-end open source platform for machine learning. The validation in tf.rawops.QuantizeAndDequantizeV2 allows invalid values for axis argument:. The...

PYSEC-2021-538

TensorFlow is an end-to-end open source platform for machine learning. The validation in tf.rawops.QuantizeAndDequantizeV2 allows invalid values for axis argument:. The...