Denial Of Service (DoS)

tensorflow is vulnerable to denial of service DoS attacks. An attacker is able to cause denial of service conditions via providing an invalid encoded input through the CompositeTensorVariant tensor, which triggers a segmentation fault in tf.rawops.CompositeTensorVariantToComponents...

Denial Of Service (DoS)

tensorflow is vulnerable to denial of service DoS attacks. An attacker is able to cause denial of service conditions via providing an input token that is not a UTF-8 bytestring to tf.rawops.PyFunc, which may trigger a CHECK fail...

Denial Of Service (DoS)

tensorflow is vulnerable to denial of service DoS attacks. An attacker is able to cause denial of service conditions via providing a large input size through tf.rawops.ResizeNearestNeighborGrad, causing buffer overflows...

Denial Of Service (DoS)

tensorflow is vulnerable to denial of service DoS attacks. An attacker is able to cause denial of service conditions by providing a sparsematrix input that is not a matrix with a shape of rank 0, triggering a CHECK fail in tf.rawops.SparseMatrixNNZ...

Remote Code Execution

tensorflow is vulnerable to remote code execution. An attacker is able to cause buffer overflows by setting poolingratio input to less then 1, leading to heap memory access, possibly resulting in remote code execution...

Denial Of Service (DoS)

tensorflow is vulnerable to denial of service DoS attacks. An attacker is able to cause denial of service conditions due to improper validation of user Inputs, densefeatures and examplestatedata, resulting in a CHECK fail in SdcaOptimizer...

Denial Of Service (DoS)

tensorflow is vulnerable to denial of service DoS attacks. An attacker is able to cause denial of service conditions by providing empty inputs through SparseFillEmptyRowsGrad...

Denial Of Service (DoS)

Tensorflow is vulnerable to denial of service. The vulnerability exists because the input size of BCast::ToShape is not properly handled which allows an attacker to crash the application by sending inputs larger than int32...

Denial Of Service (DoS)

tensorflow is vulnerable to denial of service DoS attacks. When a MirrorPadGrad is given outsize input paddings, the library gives a heap out of bound error, which allows an attacker to cause tensorflow to crash...

Denial Of Service (DoS)

tensorflow is vulnerable to denial of service. A attacker can crash the application by providing outsize inputs to rowpoolingsequence and colpoolingsequence parameters in FractionMaxPoolGrad...

Denial Of Service (DoS)

tensorflow is vulnerable to denial of service. The vulnerability exists when the ThreadUnsafeUnigramCandidateSampler is given input to filterbankchannelcount greater than the allowed max size, allowing an attacker to crash the application...

Denial Of Service (DoS)

tensorflow is vulnerable to denial of service. The vulnerability exists because the PrintOneDimV2 function of tensor.cc does not properly convert char values to bool, allowing an attacker to cause an application crash...

Denial Of Service (DoS)

tensorflow is vulnerable to denial of service. The vulnerability exists because the Compute function of listkernels.cc does not properly validate the input size, allowing an attacker to cause an application crash by providing a non-scalar input...

Denial Of Service (DoS)

tensorflow is vulnerable to denial of service. The vulnerability exists because the SetOpAttrList function of pywraptfesrc.cc fails to parse the tensor and returns a nullptr without proper error handling, allowing an attacker to cause an application crash through the null pointer dereference...

GHSA-8W5G-3WCV-9G2J Tensorflow vulnerable to Out-of-Bounds Read

Impact When the BaseCandidateSamplerOp function receives a value in trueclasses larger than rangemax, a heap oob vuln occurs. python tf.rawops.ThreadUnsafeUnigramCandidateSampler trueclasses=0x100000,1, numtrue = 2, numsampled = 2, unique = False, rangemax = 2, seed = 2, seed2 = 2 Patches We have...

Tensorflow vulnerable to Out-of-Bounds Read

Impact When the BaseCandidateSamplerOp function receives a value in trueclasses larger than rangemax, a heap oob vuln occurs. python tf.rawops.ThreadUnsafeUnigramCandidateSampler trueclasses=0x100000,1, numtrue = 2, numsampled = 2, unique = False, rangemax = 2, seed = 2, seed2 = 2 Patches We have...

Google TensorFlow buffer overflow vulnerability (CNVD-2022-80696)

Google TensorFlow is an end-to-end open source platform for machine learning from Google Google. Google TensorFlow is vulnerable to a buffer overflow vulnerability that originates when an operation with a specified input size receives a different number of inputs, and the executor will crash. No...

`CHECK` failure in `SobolSample` via missing validation

Impact Another instance of CVE-2022-35935, where SobolSample is vulnerable to a denial of service via assumed scalar inputs, was found and fixed. python import tensorflow as tf tf.rawops.SobolSampledim=tf.constant1,0, numresults=tf.constant1, skip=tf.constant1 Patches We have patched the issue in...

GHSA-CQVQ-FVHR-V6HC `CHECK` failure in `SobolSample` via missing validation

Impact Another instance of CVE-2022-35935, where SobolSample is vulnerable to a denial of service via assumed scalar inputs, was found and fixed. python import tensorflow as tf tf.rawops.SobolSampledim=tf.constant1,0, numresults=tf.constant1, skip=tf.constant1 Patches We have patched the issue in...

GHSA-XF83-Q765-XM6M `CHECK` fail in `TensorListScatter` and `TensorListScatterV2` in eager mode

Impact Another instance of CVE-2022-35991, where TensorListScatter and TensorListScatterV2 crash via non scalar inputs inelementshape, was found in eager mode and fixed. python import tensorflow as tf arg0=tf.random.uniformshape=2, 2, 2, dtype=tf.float16, maxval=None arg1=tf.random.uniformshape=2...