4723 matches found
CVE-2021-38467
A specific function code receives a raw pointer supplied by the user and deallocates this pointer. The user can then control what memory regions will be freed and cause use-after-free condition...
bikeshed path traversal vulnerability
bikeshed is a preprocessor for specification documents, converting the source document which contains only the actual specification content, plus some shorthand for linking terms and other content into a final specification document with appropriate samples, bibliographies, indexes, and so on. A...
CVE-2021-37639
TensorFlow is an end-to-end open source platform for machine learning. When restoring tensors via raw APIs, if the tensor name is not provided, TensorFlow can be tricked into dereferencing a null pointer. Alternatively, attackers can read memory outside the bounds of heap allocated data by...
PYSEC-2021-750
TensorFlow is an end-to-end open source platform for machine learning. When restoring tensors via raw APIs, if the tensor name is not provided, TensorFlow can be tricked into dereferencing a null pointer. Alternatively, attackers can read memory outside the bounds of heap allocated data by...
CVE-2021-37639
TensorFlow is an end-to-end open source platform for machine learning. When restoring tensors via raw APIs, if the tensor name is not provided, TensorFlow can be tricked into dereferencing a null pointer. Alternatively, attackers can read memory outside the bounds of heap allocated data by...
Google TensorFlow buffer error vulnerability
Google TensorFlow is an end-to-end open source platform for machine learning from Google, Inc. A buffer overflow vulnerability exists in Google TensorFlow, which stems from the fact that in affected versions, an attacker could exploit the vulnerability by sending an invalid argument to tf.rawops...
PT-2021-21754 · Google · Tensorflow
Name of the Vulnerable Software and Affected Versions: TensorFlow versions prior to 2.6.0 TensorFlow version 2.5.1 TensorFlow version 2.4.3 TensorFlow version 2.3.4 Description: The issue occurs when restoring tensors via raw APIs in TensorFlow. If the tensor name is not provided, TensorFlow can ...
Google TensorFlow code vulnerabilities
Google TensorFlow is a suite of end-to-end open source platforms for machine learning from Google USA. Google TensorFlow suffers from a code issue vulnerability that stems from the fact that when recovering a tensor via the raw API, TensorFlow may be tricked into referencing a null pointer if the...
OESA-2021-1304 openvswitch security update
Open vSwitch is a production quality, multilayer virtual switch licensed under the open source Apache 2.0 license. Security Fixes: Open vSwitch aka openvswitch 2.11.0 through 2.15.0 has a use-after-free in decodeNXASTRAWENCAP called from ofpactdecode and ofpactsdecode during the decoding of a...
Open vSwitch (aka openvswitch) 2.11.0 through 2.15.0 has a use-after-free in decode_NXAST_RAW_ENCAP (called from ofpact_decode and ofpacts_decode) during the decoding of a RAW_ENCAP action.
...
DEBIAN-CVE-2021-36980
Open vSwitch aka openvswitch 2.11.0 through 2.15.0 has a use-after-free in decodeNXASTRAWENCAP called from ofpactdecode and ofpactsdecode during the decoding of a RAWENCAP action...
AZL-6781 CVE-2021-36980 affecting package openvswitch for versions less than 2.17.0-1
Open vSwitch aka openvswitch 2.11.0 through 2.15.0 has a use-after-free in decodeNXASTRAWENCAP called from ofpactdecode and ofpactsdecode during the decoding of a RAWENCAP action...
UBUNTU-CVE-2021-36980
Open vSwitch aka openvswitch 2.11.0 through 2.15.0 has a use-after-free in decodeNXASTRAWENCAP called from ofpactdecode and ofpactsdecode during the decoding of a RAWENCAP action...
vSwitch Open resource management error vulnerability
Open vSwitch is an open source virtual switch. A resource management error vulnerability exists in Open vSwitch a.k.a. openvswitch versions 2.11.0 through 2.15.0, which stems from the fact that in decodeNXASTRAWENCAP invoked from ofpactdecode and ofpactsdecode there is during decoding the RAWENCA...
Microsoft Windows/Windows Server Remote Code Execution Vulnerability (CNVD-2021-62485)
Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation USA. Image Extension is an image extension application developed by Microsoft that allows you to view images in Raw format.A remote code execution vulnerability exists in Raw Image Extension in Microsoft...
CVE-2021-34521
Raw Image Extension Remote Code Execution Vulnerability...
CVE-2021-34521
Raw Image Extension Remote Code Execution Vulnerability...
CVE-2021-34521
Raw Image Extension Remote Code Execution Vulnerability...
