Lucene search
+L

9748 matches found

OSV
OSV
•added 2026/06/29 11:50 a.m.•19 views

PYSEC-2026-549 TensorFlow has a heap out-of-buffer read vulnerability in the QuantizeAndDequantize operation

Impact Attackers using Tensorflow can exploit the vulnerability. They can access heap memory which is not in the control of user, leading to a crash or RCE. When axis is larger than the dim of input, c-Diminput,axis goes out of bound. Same problem occurs in the QuantizeAndDequantizeV2/V3/V4/V4Gra...

9.8CVSS6.7AI score0.00838EPSS
SaveExploits1References6
PyPA
PyPA
•added 2026/06/29 11:50 a.m.•15 views

TensorFlow has a heap out-of-buffer read vulnerability in the QuantizeAndDequantize operation

ImpactAttackers using Tensorflow can exploit the vulnerability. They can access heap memory which is not in the control of user, leading to a crash or RCE.When axis is larger than the dim of input, c-Diminput,axis goes out of bound.Same problem occurs in the QuantizeAndDequantizeV2/V3/V4/V4Grad...

9.8CVSS6.7AI score0.00838EPSS
SaveExploits1References6Affected Software1
PyPA
PyPA
•added 2026/06/29 11:50 a.m.•18 views

TensorFlow has a heap out-of-buffer read vulnerability in the QuantizeAndDequantize operation

ImpactAttackers using Tensorflow can exploit the vulnerability. They can access heap memory which is not in the control of user, leading to a crash or RCE.When axis is larger than the dim of input, c-Diminput,axis goes out of bound.Same problem occurs in the QuantizeAndDequantizeV2/V3/V4/V4Grad...

9.8CVSS6.7AI score0.00838EPSS
SaveExploits1References6Affected Software1
OSV
OSV
•added 2026/06/29 11:50 a.m.•15 views

PYSEC-2026-550 TensorFlow has a heap out-of-buffer read vulnerability in the QuantizeAndDequantize operation

Impact Attackers using Tensorflow can exploit the vulnerability. They can access heap memory which is not in the control of user, leading to a crash or RCE. When axis is larger than the dim of input, c-Diminput,axis goes out of bound. Same problem occurs in the QuantizeAndDequantizeV2/V3/V4/V4Gra...

9.8CVSS6.7AI score0.00838EPSS
SaveExploits1References6
OSV
OSV
•added 2026/06/29 11:50 a.m.•16 views

PYSEC-2026-548 TensorFlow has a heap out-of-buffer read vulnerability in the QuantizeAndDequantize operation

Impact Attackers using Tensorflow can exploit the vulnerability. They can access heap memory which is not in the control of user, leading to a crash or RCE. When axis is larger than the dim of input, c-Diminput,axis goes out of bound. Same problem occurs in the QuantizeAndDequantizeV2/V3/V4/V4Gra...

9.8CVSS6.7AI score0.00838EPSS
SaveExploits1References6
OSV
OSV
•added 2026/06/29 11:50 a.m.•16 views

PYSEC-2026-369 Keras code injection vulnerability

A arbitrary code injection vulnerability in TensorFlow's Keras framework 2.13 allows attackers to execute arbitrary code with the same permissions as the application using a model that allow arbitrary code irrespective of the application...

9.8CVSS8AI score0.01745EPSS
SaveExploits1References7
PyPA
PyPA
•added 2026/06/29 11:50 a.m.•17 views

Keras code injection vulnerability

A arbitrary code injection vulnerability in TensorFlow's Keras framework 2.13 allows attackers to execute arbitrary code with the same permissions as the application using a model that allow arbitrary code irrespective of the application...

9.8CVSS7.7AI score0.01745EPSS
SaveExploits1References7Affected Software1
Positive Technologies
Positive Technologies
•added 2026/06/29 12:00 a.m.•21 views

PT-2026-53618

Impact Attackers using Tensorflow can exploit the vulnerability. They can access heap memory which is not in the control of user, leading to a crash or RCE. When axis is larger than the dim of input, c-Diminput,axis goes out of bound. Same problem occurs in the QuantizeAndDequantizeV2/V3/V4/V4Gra...

9.8CVSS5.8AI score0.00838EPSS
SaveExploits1References7
Positive Technologies
Positive Technologies
•added 2026/06/29 12:00 a.m.•24 views

PT-2026-53619

Impact Attackers using Tensorflow can exploit the vulnerability. They can access heap memory which is not in the control of user, leading to a crash or RCE. When axis is larger than the dim of input, c-Diminput,axis goes out of bound. Same problem occurs in the QuantizeAndDequantizeV2/V3/V4/V4Gra...

9.8CVSS5.8AI score0.00838EPSS
SaveExploits1References7
Positive Technologies
Positive Technologies
•added 2026/06/29 12:00 a.m.•19 views

PT-2026-53617

Impact Attackers using Tensorflow can exploit the vulnerability. They can access heap memory which is not in the control of user, leading to a crash or RCE. When axis is larger than the dim of input, c-Diminput,axis goes out of bound. Same problem occurs in the QuantizeAndDequantizeV2/V3/V4/V4Gra...

9.8CVSS5.8AI score0.00838EPSS
SaveExploits1References7
Positive Technologies
Positive Technologies
•added 2026/06/29 12:00 a.m.•18 views

PT-2026-53457

A arbitrary code injection vulnerability in TensorFlow's Keras framework 2.13 allows attackers to execute arbitrary code with the same permissions as the application using a model that allow arbitrary code irrespective of the application...

9.8CVSS6.1AI score0.01745EPSS
SaveExploits1References7
Tenable Nessus
Tenable Nessus
•added 2026/06/25 12:00 a.m.•13 views

Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS : FFmpeg vulnerabilities (USN-8469-1)

The remote Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8469-1 advisory. Jiasheng Jiang discovered that FFmpeg incorrectly handled memory in certain error-handling paths of its TensorFlow DN...

9.8CVSS6.2AI score0.00158EPSS
SaveExploits0References3
OSV
OSV
•added 2026/06/24 4:14 p.m.•24 views

USN-8469-1 ffmpeg vulnerabilities

Jiasheng Jiang discovered that FFmpeg incorrectly handled memory in certain error-handling paths of its TensorFlow DNN backend. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 24.04 LTS. CVE-2025-12343 Quang Luong discovered that FFmpeg...

9.8CVSS6.9AI score0.00158EPSS
SaveExploits0References3
Chainguard
Chainguard
•added 2026/06/23 8:17 a.m.•35 views

CVE-2026-44727 vulnerabilities

Vulnerabilities for packages: tensorflow-gpu-jupyter, tensorflow-cpu-jupyter...

9.3CVSS7.2AI score0.00438EPSS
SaveExploits0
Chainguard
Chainguard
•added 2026/06/23 8:17 a.m.•17 views

GHSA-VMHF-C436-HXJ4 vulnerabilities

Vulnerabilities for packages: tensorflow-gpu-jupyter...

5.8AI score
SaveExploits0
Chainguard
Chainguard
•added 2026/06/23 8:17 a.m.•24 views

GHSA-FCW5-X6J4-CCMP vulnerabilities

Vulnerabilities for packages: tensorflow-gpu-jupyter, tensorflow-cpu-jupyter...

5.7AI score
SaveExploits0
Wolfi
Wolfi
•added 2026/06/20 2:16 p.m.•25 views

GHSA-FCW5-X6J4-CCMP vulnerabilities

Vulnerabilities for packages: tensorflow-cpu-jupyter...

5.8AI score
SaveExploits0
Wolfi
Wolfi
•added 2026/06/20 2:16 p.m.•22 views

CVE-2026-44727 vulnerabilities

Vulnerabilities for packages: tensorflow-cpu-jupyter...

9.3CVSS5.8AI score0.00438EPSS
SaveExploits0
Wolfi
Wolfi
•added 2026/06/13 7:48 p.m.•29 views

CVE-2026-49854 vulnerabilities

Vulnerabilities for packages: airflow, mitmproxy...

5.3CVSS5.8AI score0.00419EPSS
SaveExploits0
Wolfi
Wolfi
•added 2026/06/13 7:48 p.m.•39 views

GHSA-CX3H-4QPV-8HC9 vulnerabilities

Vulnerabilities for packages: airflow, mitmproxy...

5.7AI score
SaveExploits0
Rows per page
Query Builder