793 matches found
PYSEC-2021-797
TensorFlow is an end-to-end open source platform for machine learning. In affected versions the strided slice implementation in TFLite has a logic bug which can allow an attacker to trigger an infinite loop. This arises from newly introduced support for ellipsis in axis definition. An attacker ca...
CVE-2021-37686
TensorFlow is an end-to-end open source platform for machine learning. In affected versions the strided slice implementation in TFLite has a logic bug which can allow an attacker to trigger an infinite loop. This arises from newly introduced support for ellipsis in axis definition. An attacker ca...
CVE-2021-37686 Infinite loop in TensorFlow Lite
TensorFlow is an end-to-end open source platform for machine learning. In affected versions the strided slice implementation in TFLite has a logic bug which can allow an attacker to trigger an infinite loop. This arises from newly introduced support for ellipsis in axis definition. An attacker ca...
PYSEC-2021-560
TensorFlow is an end-to-end open source platform for machine learning. When a user does not supply arguments that determine a valid sparse tensor, tf.rawops.SparseTensorSliceDataset implementation can be made to dereference a null pointer. The implementation has some argument validation but fails...
PYSEC-2021-758
TensorFlow is an end-to-end open source platform for machine learning. When a user does not supply arguments that determine a valid sparse tensor, tf.rawops.SparseTensorSliceDataset implementation can be made to dereference a null pointer. The implementation has some argument validation but fails...
PT-2021-21805 · Google · Tensorflow
Name of the Vulnerable Software and Affected Versions: TensorFlow version 2.6.0 Description: The strided slice implementation in TFLite has a logic bug which can allow an attacker to trigger an infinite loop. This arises from newly introduced support for ellipsis in axis definition. An attacker c...
CVE-2021-38188
An issue was discovered in the iced-x86 crate through 1.10.3 for Rust. In Decoder::new, slice.getuncheckedslice.length is used unsafely...
CVE-2021-38188
An issue was discovered in the iced-x86 crate through 1.10.3 for Rust. In Decoder::new, slice.getuncheckedslice.length is used unsafely...
CVE-2021-0552
In getEndItemSliceAction of MediaOutputSlice.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Andro...
PT-2021-7711 · Libde265 +3 · Libde265 +3
Name of the Vulnerable Software and Affected Versions: libde265 version 1.0.8 Description: An issue exists due to a SEGV in slice.cc, related to insufficient access control in the libde265 video codec implementation. This could potentially allow a remote attacker to cause a denial of service...
DEBIAN-CVE-2020-22029
A heap-based Buffer Overflow vulnerability exists in FFmpeg 4.2 at libavfilter/vfcolorconstancy.c: in slicegetderivative, which crossfadesamplesfltp, which might lead to memory corruption and other potential consequences...
jwt-go: access restriction bypass vulnerability
A vulnerability was found in jwt-go where it is vulnerable to Access Restriction Bypass if m"aud" happens to be string, as allowed by the spec, the type assertion fails and the value of aud is "". This can cause audience verification to succeed even if the audiences being passed are incorrect if...
etcd: Large slice causes panic in decodeRecord method
A flaw was found In etcd, where a large slice causes panic in the decodeRecord method. The size of a record is stored in the length field of a WAL file, and no additional validation is performed on this data. Therefore, it is possible to forge an extremely large frame size that can unintentionall...
UBUNTU-CVE-2021-30014
There is a integer overflow in mediatools/avparsers.c in the hevcparseslicesegment function in GPAC from v0.9.0-preview to 1.0.1 which results in a crash...
CVE-2021-30014
There is a integer overflow in mediatools/avparsers.c in the hevcparseslicesegment function in GPAC from v0.9.0-preview to 1.0.1 which results in a crash...
GPAC 输入验证错误漏洞
GPAC is a multimedia framework for rich media and distributed under the LGPL license. An integer overflow vulnerability exists in the hevcparseslicesegment function in mediatools/avparsers.c in GPAC version 1.0.1. An attacker can exploit this vulnerability to cause a program crash...
Rust Resource Management Error Vulnerability (CNVD-2021-29836)
Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A resource management error vulnerability exists in slice-deque crate for Rust 2021-02-19 and earlier versions, which originates from SliceDeque::drainfilter.No detailed vulnerability details are available at th...
PT-2021-12083 · Revel · Revel
Name of the Vulnerable Software and Affected Versions: revel versions prior to 1.0.0 Description: The issue is caused by unsanitized input in the query parser, allowing remote attackers to cause resource exhaustion via memory allocation. An attacker can manipulate the request query sent to an...
