Lucene search
+L

9269 matches found

CVE
CVE
added 2022/11/18 12:00 a.m.124 views

CVE-2022-41893

CVE-2022-41893 affects TensorFlow where calling tf.raw_ops.TensorListResize with a nonscalar input for size triggers a CHECK failure, enabling a denial of service as described in the advisory. The root cause is a validation flaw in TensorListResize; a fix was committed (GitHub commit 888e34b49009...

7.5CVSS6AI score0.00456EPSS
SaveExploits1References3Affected Software1
Positive Technologies
Positive Technologies
added 2022/11/18 12:00 a.m.12 views

PT-2022-26129

Name of the Vulnerable Software and Affected Versions TensorFlow versions prior to 2.11 TensorFlow versions 2.10.1 and earlier TensorFlow versions 2.9.3 and earlier TensorFlow versions 2.8.4 and earlier Description The issue occurs when the SparseFillEmptyRowsGrad function is given empty inputs,...

7.5CVSS7.1AI score0.00457EPSS
SaveExploits1References17
Cvelist
Cvelist
added 2022/11/18 12:00 a.m.52 views

CVE-2022-41898 `CHECK` fail via inputs in `SparseFillEmptyRowsGrad` in Tensorflow

TensorFlow is an open source platform for machine learning. If SparseFillEmptyRowsGrad is given empty inputs, TensorFlow will crash. We have patched the issue in GitHub commit af4a6a3c8b95022c351edae94560acc61253a1b8. The fix will be included in TensorFlow 2.11. We will also cherrypick this commi...

4.8CVSS7.7AI score0.00457EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2022/11/18 12:00 a.m.49 views

PT-2022-26118

Name of the Vulnerable Software and Affected Versions TensorFlow versions prior to 2.11 TensorFlow versions 2.10.1 and earlier TensorFlow versions 2.9.3 and earlier Description TensorFlow is an open source platform for machine learning. The tf.keras.losses.poisson function receives a y pred and y...

7.5CVSS7.1AI score0.00456EPSS
SaveExploits1References18
OSV
OSV
added 2022/11/18 12:00 a.m.24 views

CVE-2022-41880 ThreadUnsafeUnigramCandidateSampler Heap out of bounds in Tensorflow

TensorFlow is an open source platform for machine learning. When the BaseCandidateSamplerOp function receives a value in trueclasses larger than rangemax, a heap oob read occurs. We have patched the issue in GitHub commit b389f5c944cadfdfe599b3f1e4026e036f30d2d4. The fix will be included in...

6.8CVSS9.2AI score
SaveExploits0References5
OSV
OSV
added 2022/11/18 12:00 a.m.26 views

CVE-2022-41886 Overflow in `ImageProjectiveTransformV2` in Tensorflow

TensorFlow is an open source platform for machine learning. When tf.rawops.ImageProjectiveTransformV2 is given a large output shape, it overflows. We have patched the issue in GitHub commit 8faa6ea692985dbe6ce10e1a3168e0bd60a723ba. The fix will be included in TensorFlow 2.11. We will also...

4.8CVSS7.7AI score
SaveExploits0References5
OSV
OSV
added 2022/11/18 12:00 a.m.25 views

CVE-2022-41908 `CHECK` fail via inputs in `PyFunc` in Tensorflow

TensorFlow is an open source platform for machine learning. An input token that is not a UTF-8 bytestring will trigger a CHECK fail in tf.rawops.PyFunc. We have patched the issue in GitHub commit 9f03a9d3bafe902c1e6beb105b2f24172f238645. The fix will be included in TensorFlow 2.11. We will also...

4.8CVSS7.8AI score
SaveExploits0References5
OSV
OSV
added 2022/11/18 12:00 a.m.28 views

CVE-2022-41911 Invalid char to bool conversion when printing a tensor in Tensorflow

TensorFlow is an open source platform for machine learning. When printing a tensor, we get it's data as a const char array since that's the underlying storage and then we typecast it to the element type. However, conversions from char to bool are undefined if the char is not 0 or 1, so...

4.8CVSS7.6AI score
SaveExploits0References5
OSV
OSV
added 2022/11/18 12:00 a.m.28 views

CVE-2022-41891 Segfault in `tf.raw_ops.TensorListConcat` in Tensorflow

TensorFlow is an open source platform for machine learning. If tf.rawops.TensorListConcat is given elementshape=, it results segmentation fault which can be used to trigger a denial of service attack. We have patched the issue in GitHub commit fc33f3dc4c14051a83eec6535b608abe1d355fde. The fix wil...

4.8CVSS7.6AI score
SaveExploits0References5
OSV
OSV
added 2022/11/18 12:00 a.m.27 views

CVE-2022-41885 Overflow in `FusedResizeAndPadConv2D` in Tensorflow

TensorFlow is an open source platform for machine learning. When tf.rawops.FusedResizeAndPadConv2D is given a large tensor shape, it overflows. We have patched the issue in GitHub commit d66e1d568275e6a2947de97dca7a102a211e01ce. The fix will be included in TensorFlow 2.11. We will also cherrypick...

4.8CVSS7.5AI score
SaveExploits0References5
Debian CVE
Debian CVE
added 2022/11/18 12:00 a.m.13 views

CVE-2022-41891

TensorFlow is an open source platform for machine learning. If tf.rawops.TensorListConcat is given elementshape=, it results segmentation fault which can be used to trigger a denial of service attack. We have patched the issue in GitHub commit fc33f3dc4c14051a83eec6535b608abe1d355fde. The fix wil...

7.5CVSS6.8AI score0.00446EPSS
SaveExploits1
Debian CVE
Debian CVE
added 2022/11/18 12:00 a.m.18 views

CVE-2022-41896

TensorFlow is an open source platform for machine learning. If ThreadUnsafeUnigramCandidateSampler is given input filterbankchannelcount greater than the allowed max size, TensorFlow will crash. We have patched the issue in GitHub commit 39ec7eaf1428e90c37787e5b3fbd68ebd3c48860. The fix will be...

7.5CVSS7AI score0.00457EPSS
SaveExploits1
Debian CVE
Debian CVE
added 2022/11/18 12:00 a.m.18 views

CVE-2022-41886

TensorFlow is an open source platform for machine learning. When tf.rawops.ImageProjectiveTransformV2 is given a large output shape, it overflows. We have patched the issue in GitHub commit 8faa6ea692985dbe6ce10e1a3168e0bd60a723ba. The fix will be included in TensorFlow 2.11. We will also...

7.5CVSS7AI score0.00446EPSS
SaveExploits1
Debian CVE
Debian CVE
added 2022/11/18 12:00 a.m.13 views

CVE-2022-41909

TensorFlow is an open source platform for machine learning. An input encoded that is not a valid CompositeTensorVariant tensor will trigger a segfault in tf.rawops.CompositeTensorVariantToComponents. We have patched the issue in GitHub commits bf594d08d377dc6a3354d9fdb494b32d45f91971 and...

7.5CVSS7AI score0.00508EPSS
SaveExploits1
Debian CVE
Debian CVE
added 2022/11/18 12:00 a.m.13 views

CVE-2022-41888

TensorFlow is an open source platform for machine learning. When running on GPU, tf.image.generateboundingboxproposals receives a scores input that must be of rank 4 but is not checked. We have patched the issue in GitHub commit cf35502463a88ca7185a99daa7031df60b3c1c98. The fix will be included i...

7.5CVSS7AI score0.00456EPSS
SaveExploits1
Debian CVE
Debian CVE
added 2022/11/18 12:00 a.m.65 views

CVE-2022-41899

TensorFlow is an open source platform for machine learning. Inputs densefeatures or examplestatedata not of rank 2 will trigger a CHECK fail in SdcaOptimizer. We have patched the issue in GitHub commit 80ff197d03db2a70c6a111f97dcdacad1b0babfa. The fix will be included in TensorFlow 2.11. We will...

7.5CVSS7AI score0.00457EPSS
SaveExploits1
OSV
OSV
added 2022/11/18 12:00 a.m.26 views

CVE-2022-41901 `CHECK_EQ` fail via input in `SparseMatrixNNZ` in Tensorflow

TensorFlow is an open source platform for machine learning. An input sparsematrix that is not a matrix with a shape with rank 0 will trigger a CHECK fail in tf.rawops.SparseMatrixNNZ. We have patched the issue in GitHub commit f856d02e5322821aad155dad9b3acab1e9f5d693. The fix will be included in...

4.8CVSS7.8AI score
SaveExploits0References5
OSV
OSV
added 2022/11/18 12:00 a.m.29 views

CVE-2022-41909 Segfault in `CompositeTensorVariantToComponents` in Tensorflow

TensorFlow is an open source platform for machine learning. An input encoded that is not a valid CompositeTensorVariant tensor will trigger a segfault in tf.rawops.CompositeTensorVariantToComponents. We have patched the issue in GitHub commits bf594d08d377dc6a3354d9fdb494b32d45f91971 and...

4.8CVSS7.8AI score
SaveExploits0References6
OSV
OSV
added 2022/11/18 12:00 a.m.26 views

CVE-2022-41887 Overflow in `tf.keras.losses.poisson` in Tensorflow

TensorFlow is an open source platform for machine learning. tf.keras.losses.poisson receives a ypred and ytrue that are passed through functor::mul in BinaryOp. If the resulting dimensions overflow an int32, TensorFlow will crash due to a size mismatch during broadcast assignment. We have patched...

4.8CVSS7.8AI score
SaveExploits0References6
OSV
OSV
added 2022/11/18 12:00 a.m.31 views

CVE-2022-41894 Buffer overflow in `CONV_3D_TRANSPOSE` on TFLite

TensorFlow is an open source platform for machine learning. The reference kernel of the CONV3DTRANSPOSE TensorFlow Lite operator wrongly increments the dataptr when adding the bias to the result. Instead of dataptr += numchannels; it should be dataptr += outputnumchannels; as if the number of inp...

7.1CVSS8.3AI score
SaveExploits0References5
Rows per page
Query Builder