Lucene search
+L

1726 matches found

ATTACKERKB
ATTACKERKB
added 2021/05/14 8:15 p.m.5 views

CVE-2021-29592

TensorFlow is an end-to-end open source platform for machine learning. The fix for CVE-2020-15209https://vulners.com/cve/CVE-2020-15209 missed the case when the target shape of Reshape operator is given by the elements of a 1-D tensor. As such, the fix for the...

7.8CVSS6.7AI score0.008EPSS
SaveExploits2References3Affected Software1
PyPA
PyPA
added 2021/05/14 8:15 p.m.16 views

PYSEC-2021-233

TensorFlow is an end-to-end open source platform for machine learning. The implementation of the EmbeddingLookup TFLite operator is vulnerable to a division by zero...

7.8CVSS6.9AI score0.00201EPSS
SaveExploits1References2Affected Software1
OSV
OSV
added 2021/05/14 8:15 p.m.12 views

PYSEC-2021-152

TensorFlow is an end-to-end open source platform for machine learning. The implementation of MatrixDiag operationshttps://github.com/tensorflow/tensorflow/blob/4c4f420e68f1cfaf8f4b6e8e3eb857e9e4c3ff33/tensorflow/core/kernels/linalg/matrixdiagop.ccL195-L197 does not validate that the tensor...

7.8CVSS5.9AI score0.00201EPSS
SaveExploits1References2
OSV
OSV
added 2021/05/14 8:15 p.m.25 views

PYSEC-2021-534

TensorFlow is an end-to-end open source platform for machine learning. A specially crafted TFLite model could trigger an OOB read on heap in the TFLite implementation of...

7.8CVSS7AI score0.00215EPSS
SaveExploits1References2
OSV
OSV
added 2021/05/14 8:15 p.m.14 views

PYSEC-2021-687

TensorFlow is an end-to-end open source platform for machine learning. An attacker can cause a denial of service by exploiting a CHECK-failure coming from tf.rawops.LoadAndRemapMatrix. This is because the...

5.5CVSS5.9AI score0.00189EPSS
SaveExploits1References2
PyPA
PyPA
added 2021/05/14 8:15 p.m.11 views

PYSEC-2021-545

TensorFlow is an end-to-end open source platform for machine learning. An attacker can cause a denial of service via CHECK-fail in tf.strings.substr with invalid arguments. The fix will be included in TensorFlow 2.5.0. We will also cherrypick this commit on TensorFlow 2.4.2, TensorFlow 2.3.3,...

5.5CVSS6.8AI score0.0023EPSS
SaveExploits1References4Affected Software1
PyPA
PyPA
added 2021/05/14 8:15 p.m.18 views

PYSEC-2021-481

TensorFlow is an end-to-end open source platform for machine learning. An attacker can read data outside of bounds of heap allocated buffer in tf.rawops.QuantizeAndDequantizeV3. This is because the...

7.1CVSS7.1AI score0.00198EPSS
SaveExploits1References2Affected Software1
OSV
OSV
added 2021/05/14 8:15 p.m.16 views

PYSEC-2021-244

TensorFlow is an end-to-end open source platform for machine learning. Incomplete validation in SparseAdd results in allowing attackers to exploit undefined behavior dereferencing null pointers as well as write outside of bounds of heap allocated data. The...

7.8CVSS7.1AI score0.00234EPSS
SaveExploits1References3
OSV
OSV
added 2021/05/14 8:15 p.m.23 views

PYSEC-2021-516

TensorFlow is an end-to-end open source platform for machine learning. The optimized implementation of the TransposeConv TFLite operator is vulnerable to a division by zero error. An attacker can craft a model such that strideh,w values are 0. Code calling this function must validate these...

7.8CVSS1.7AI score0.00201EPSS
SaveExploits1References2
OSV
OSV
added 2021/05/14 8:15 p.m.20 views

PYSEC-2021-464

TensorFlow is an end-to-end open source platform for machine learning. An attacker can cause a heap buffer overflow in QuantizedReshape by passing in invalid thresholds for the quantization. This is because the...

7.8CVSS1.5AI score0.00211EPSS
SaveExploits1References2
OSV
OSV
added 2021/05/14 8:15 p.m.22 views

PYSEC-2021-466

TensorFlow is an end-to-end open source platform for machine learning. An attacker can cause a division by zero to occur in Conv2DBackpropFilter. This is because the...

5.5CVSS1AI score0.00189EPSS
SaveExploits1References2
OSV
OSV
added 2021/05/14 8:15 p.m.22 views

PYSEC-2021-509

TensorFlow is an end-to-end open source platform for machine learning. Due to lack of validation in tf.rawops.CTCBeamSearchDecoder, an attacker can trigger denial of service via segmentation faults. The...

5.5CVSS1.7AI score0.00189EPSS
SaveExploits1References2
OSV
OSV
added 2021/05/14 8:15 p.m.25 views

PYSEC-2021-491

TensorFlow is an end-to-end open source platform for machine learning. An attacker can cause a denial of service by exploiting a CHECK-failure coming from the implementation of tf.rawops.RFFT. Eigen code operating on an empty matrix can trigger on an assertion and will cause program termination...

5.5CVSS3.1AI score0.00189EPSS
SaveExploits1References2
OSV
OSV
added 2021/05/14 8:15 p.m.11 views

PYSEC-2021-255

TensorFlow is an end-to-end open source platform for machine learning. Passing a complex argument to tf.transpose at the same time as passing conjugate=True argument results in a crash. The fix will be included in TensorFlow 2.5.0. We will also cherrypick this commit on TensorFlow 2.4.2, TensorFl...

5.5CVSS6.1AI score0.0023EPSS
SaveExploits1References4
PyPA
PyPA
added 2021/05/14 8:15 p.m.12 views

PYSEC-2021-226

TensorFlow is an end-to-end open source platform for machine learning. The reference implementation of the GatherNd TFLite operator is vulnerable to a division by zero...

7.8CVSS6.9AI score0.00201EPSS
SaveExploits1References2Affected Software1
PyPA
PyPA
added 2021/05/14 8:15 p.m.11 views

PYSEC-2021-537

TensorFlow is an end-to-end open source platform for machine learning. Incomplete validation in SparseAdd results in allowing attackers to exploit undefined behavior dereferencing null pointers as well as write outside of bounds of heap allocated data. The...

7.8CVSS7.2AI score0.00234EPSS
SaveExploits1References3Affected Software1
PyPA
PyPA
added 2021/05/14 8:15 p.m.9 views

PYSEC-2021-470

TensorFlow is an end-to-end open source platform for machine learning. An attacker can cause a heap buffer overflow by passing crafted inputs to tf.rawops.StringNGrams. This is because the...

5.5CVSS7.4AI score0.00198EPSS
SaveExploits1References2Affected Software1
PyPA
PyPA
added 2021/05/14 8:15 p.m.13 views

PYSEC-2021-532

TensorFlow is an end-to-end open source platform for machine learning. The TFLite implementation of hashtable lookup is vulnerable to a division by zero errorhttps://github.com/tensorflow/tensorflow/blob/1a8e885b864c818198a5b2c0cbbeca5a1e833bc8/tensorflow/lite/kernels/hashtablelookup.ccL114-L115 ...

5.5CVSS6.9AI score0.00189EPSS
SaveExploits1References2Affected Software1
PyPA
PyPA
added 2021/05/14 8:15 p.m.14 views

PYSEC-2021-711

TensorFlow is an end-to-end open source platform for machine learning. The TFLite computation for size of output after padding, ComputeOutSizehttps://github.com/tensorflow/tensorflow/blob/0c9692ae7b1671c983569e5d3de5565843d500cf/tensorflow/lite/kernels/padding.hL43-L55, does not check that the...

7.8CVSS6.9AI score0.00201EPSS
SaveExploits1References2Affected Software1
PyPA
PyPA
added 2021/05/14 8:15 p.m.9 views

PYSEC-2021-211

TensorFlow is an end-to-end open source platform for machine learning. The implementation of tf.rawops.MaxPool3DGradGrad exhibits undefined behavior by dereferencing null pointers backing attacker-supplied empty tensors. The...

7.8CVSS6.9AI score0.00201EPSS
SaveExploits1References2Affected Software1
Rows per page
Query Builder