6 matches found
Heap overflow in `QuantizeAndDequantizeV2`
ImpactThe function MakeGrapplerFunctionItem takes arguments that determine the sizes of inputs and outputs. If the inputs given are greater than or equal to the sizes of the outputs, an out-of-bounds memory read or a crash is triggered.pythonimport tensorflow as [email protected] test:...
Heap overflow in `QuantizeAndDequantizeV2`
ImpactThe function MakeGrapplerFunctionItem takes arguments that determine the sizes of inputs and outputs. If the inputs given are greater than or equal to the sizes of the outputs, an out-of-bounds memory read or a crash is triggered.pythonimport tensorflow as [email protected] test:...
EUVD-2021-0351
Malware in sbrugna...
Remote Code Execution (RCE)
tensorflow is vulnerable to Remote Code Execution RCE. The vulnerability is due to the QuantizeAndDequantizeV2/V3/V4/V4Grad functions in arrayops.cc, which allows heap out-of-buffer reads, possibly allowing an attacker to execute malicious code or crash the system...
