1 matches found
Incomplete validation in boosted trees code
Impact The code for boosted trees in TensorFlow is still missing validation. As a result, attackers can trigger denial of service via dereferencing nullptrs or via CHECK-failures as well as abuse undefined behavior binding references to nullptrs. An attacker can also read and write from heap...
8.8CVSS2.4AI score0.00168EPSS
SaveExploits0References7Affected Software3
20