Lucene search
+L

14 matches found

PyPA
PyPA
•added 2026/07/13 2:19 p.m.•21 views

TensorFlow vulnerable to segfault in `QuantizedAvgPool`

ImpactIf QuantizedAvgPool is given mininput or maxinput tensors of a nonzero rank, it results in a segfault that can be used to trigger a denial of service attack.pythonimport tensorflow as tfksize = 1, 2, 2, 1strides = 1, 2, 2, 1padding = "SAME"input = tf.constant1, shape=1,4,4,2,...

7.5CVSS6.9AI score0.00493EPSS
SaveExploits0References7Affected Software1
PyPA
PyPA
•added 2026/07/07 10:17 a.m.•17 views

TensorFlow vulnerable to segfault in `QuantizedAvgPool`

ImpactIf QuantizedAvgPool is given mininput or maxinput tensors of a nonzero rank, it results in a segfault that can be used to trigger a denial of service attack.pythonimport tensorflow as tfksize = 1, 2, 2, 1strides = 1, 2, 2, 1padding = "SAME"input = tf.constant1, shape=1,4,4,2,...

7.5CVSS7AI score0.00493EPSS
SaveExploits0References7Affected Software1
RedhatCVE
RedhatCVE
•added 2026/01/09 9:11 a.m.•22 views

CVE-2022-35966

TensorFlow is an open source platform for machine learning. If QuantizedAvgPool is given mininput or maxinput tensors of a nonzero rank, it results in a segfault that can be used to trigger a denial of service attack. We have patched the issue in GitHub commit...

7.5CVSS6.6AI score0.00493EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•26 views

EUVD-2022-6697

Malicious code in bioql PyPI...

7.5CVSS7.7AI score0.00493EPSS
SaveExploits0References6
Veracode
Veracode
•added 2022/10/04 4:58 a.m.•25 views

Denial Of Service (DoS)

tensorflow is vulnerable to denial of service. An attacker can crash the application through the segmentation fault by passing a nonzero rank when QuantizedAvgPool is given mininput or maxinput tensors to the quantizedpoolingops.cc...

7.5CVSS7.3AI score0.00493EPSS
SaveExploits0References9Affected Software3
Veracode
Veracode
•added 2022/10/04 4:22 a.m.•32 views

Denial Of Service (DoS)

tensorflow is vulnerable to denial of service. An attacker can crash the application through the segmentation fault by passing a nonzero rank when QuantizedAvgPool is given mininput or maxinput tensors to the quantizedpoolingops.cc in eager mode...

7.5CVSS7.3AI score0.00493EPSS
SaveExploits0References9Affected Software3
Github Security Blog
Github Security Blog
•added 2022/09/16 10:15 p.m.•44 views

TensorFlow vulnerable to segfault in `QuantizedAvgPool`

Impact If QuantizedAvgPool is given mininput or maxinput tensors of a nonzero rank, it results in a segfault that can be used to trigger a denial of service attack. python import tensorflow as tf ksize = 1, 2, 2, 1 strides = 1, 2, 2, 1 padding = "SAME" input = tf.constant1, shape=1,4,4,2,...

7.5CVSS7.5AI score0.00493EPSS
SaveExploits0References5Affected Software3
NVD
NVD
•added 2022/09/16 9:15 p.m.•42 views

CVE-2022-35966

TensorFlow is an open source platform for machine learning. If QuantizedAvgPool is given mininput or maxinput tensors of a nonzero rank, it results in a segfault that can be used to trigger a denial of service attack. We have patched the issue in GitHub commit...

7.5CVSS0.00493EPSS
SaveExploits0References2
OSV
OSV
•added 2022/09/16 8:35 p.m.•48 views

CVE-2022-35966 Segfault in `QuantizedAvgPool` in TensorFlow

TensorFlow is an open source platform for machine learning. If QuantizedAvgPool is given mininput or maxinput tensors of a nonzero rank, it results in a segfault that can be used to trigger a denial of service attack. We have patched the issue in GitHub commit...

5.9CVSS7.6AI score
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2022/09/16 8:35 p.m.•6 views

CVE-2022-35966 Segfault in `QuantizedAvgPool` in TensorFlow

TensorFlow is an open source platform for machine learning. If QuantizedAvgPool is given mininput or maxinput tensors of a nonzero rank, it results in a segfault that can be used to trigger a denial of service attack. We have patched the issue in GitHub commit...

5.9CVSS7.5AI score0.00493EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2022/09/16 8:35 p.m.•47 views

CVE-2022-35966 Segfault in `QuantizedAvgPool` in TensorFlow

TensorFlow is an open source platform for machine learning. If QuantizedAvgPool is given mininput or maxinput tensors of a nonzero rank, it results in a segfault that can be used to trigger a denial of service attack. We have patched the issue in GitHub commit...

5.9CVSS7.7AI score0.00493EPSS
SaveExploits0References2
Debian CVE
Debian CVE
•added 2022/09/16 8:35 p.m.•22 views

CVE-2022-35966

TensorFlow is an open source platform for machine learning. If QuantizedAvgPool is given mininput or maxinput tensors of a nonzero rank, it results in a segfault that can be used to trigger a denial of service attack. We have patched the issue in GitHub commit...

7.5CVSS6.8AI score0.00493EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/09/16 12:00 a.m.•0 views

CVE-2022-35966: Improper Input Validation

TensorFlow is an open source platform for machine learning. If QuantizedAvgPool is given mininput or maxinput tensors of a nonzero rank, it results in a segfault that can be used to trigger a denial of service attack. We have patched the issue in GitHub commit...

7.5CVSS7.1AI score0.00493EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2022/09/16 12:00 a.m.•16 views

PT-2022-23065

Name of the Vulnerable Software and Affected Versions TensorFlow versions prior to 2.10.0 TensorFlow versions 2.9.1, 2.8.1, and 2.7.2 Description The issue occurs when QuantizedAvgPool is given min input or max input tensors of a nonzero rank, resulting in a segfault that can be used to trigger a...

7.5CVSS7.1AI score0.00493EPSS
SaveExploits0References17
Rows per page
Query Builder