69 matches found
CVE-2021-41225
TensorFlow is an open source platform for machine learning. In affected versions TensorFlow's Grappler optimizer has a use of unitialized variable. If the trainnodes vector obtained from the saved model that gets optimized does not contain a Dequeue node, then dequeuenode is left unitialized. The...
CVE-2022-35941
TensorFlow is an open source platform for machine learning. The AvgPoolOp function takes an argument ksize that must be positive but is not checked. A negative ksize can trigger a CHECK failure and crash the program. We have patched the issue in GitHub commit...
CVE-2021-41210
TensorFlow is an open source platform for machine learning. In affected versions the shape inference functions for SparseCountSparseOutput can trigger a read outside of bounds of heap allocated array. The fix will be included in TensorFlow 2.7.0. We will also cherrypick this commit on TensorFlow...
CVE-2022-23591
Tensorflow is an Open Source Machine Learning Framework. The GraphDef format in TensorFlow does not allow self recursive functions. The runtime assumes that this invariant is satisfied. However, a GraphDef containing a fragment such as the following can be consumed when loading a SavedModel. This...
CVE-2022-35937
TensorFlow is an open source platform for machine learning. The GatherNd function takes arguments that determine the sizes of inputs and outputs. If the inputs given are greater than or equal to the sizes of the outputs, an out-of-bounds memory read is triggered. This issue has been patched in...
EUVD-2021-0400
Malware in sbrugna...
EUVD-2021-0304
Malware in sbrugna...
EUVD-2021-0310
Malware in sbrugna...
EUVD-2019-0137
Malware in sbrugna...
EUVD-2021-0383
Malware in sbrugna...
EUVD-2020-0213
Malware in sbrugna...
EUVD-2023-1018
Malicious code in bioql PyPI...
EUVD-2022-6944
Malicious code in bioql PyPI...
EUVD-2022-6965
Malicious code in bioql PyPI...
EUVD-2022-7468
Malicious code in bioql PyPI...
EUVD-2022-6768
Malicious code in bioql PyPI...
EUVD-2022-4208
Malicious code in bioql PyPI...
EUVD-2022-6925
Malicious code in bioql PyPI...
EUVD-2022-0309
Malicious code in bioql PyPI...
CVE-2022-29209
TensorFlow is an open source platform for machine learning. Prior to versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4, the macros that TensorFlow uses for writing assertions e.g., CHECKLT, CHECKGT, etc. have an incorrect logic when comparing sizet and int values. Due to type conversion rules, several of t...