Google TensorFlow code issue vulnerability (CNVD-2023-10609)

Google TensorFlow is an end-to-end open source platform for machine learning from Google, Inc. A code issue vulnerability exists in Google TensorFlow, which stems from the fact that if an empty sortedinputs input is provided for a LowerBound or UpperBound, it can cause nullptr dereference, an...

Google TensorFlow Denial of Service Vulnerability (CNVD-2023-15783)

Google TensorFlow is an end-to-end open source platform for machine learning from Google. Google TensorFlow has a denial-of-service vulnerability that could be exploited by attackers to trigger a denial-of-service attack...

Denial Of Service (DoS)

tensorflow is vulnerable to denial of service. The vulnerability exists in ImportNodes in functiondefimport.cc because the assertion fails on MLIR when empty edge names are given which causes an application crash...

Denial Of Service (DoS)

tensorflow is vulnerable to denial of service. The vulnerability exists in Compute function of listkernels.h because elementshape check is not properly handled which allows an attacker to cause an application crash...

Denial Of Service (DoS)

tensorflow is vulnerable to denial of service DoS attacks. A remote attacker is able to trigger a CHECK-fail mechanism instead of returning a status by providing invalid number of arguments through FullTypeDef& t to tensorflow::fulltype::SubstituteFromAttrs, causing an application crash...

Denial Of Service (DoS)

tensorflow is vulnerable to denial of service DoS attacks. A segmentation fault in RaggedBincount could be triggered via an empty input tensor through splits, which allows remote attackers to cause denial of service conditions in the system...

Denial Of Service (DoS)

tensorflow is vulnerable to denial of service DoS attacks. A malicious user is able to cause denial of service conditions by providing an input value that does not fit into an int64t through RangeSize, causing the application to crash...

Denial Of Service (DoS)

tensorflow is vulnerable to denial of service DoS attacks. A malicious user is able to cause denial of service conditions by providing the elementshape in TensorListFromTensor with a rank greater than one, which gives a CHECK fail, triggering an application crash...

Denial Of Service (DoS)

tensorflow is vulnerable to denial of service DoS attacks. A malicious user is able to cause a null dereference by providing empty function attributes to the mlir::tfg::ConvertGenericFunctionToFunctionDef function, causing the application to crash...

Denial Of Service (DoS)

tensorflow is vulnerable to denial of service attacks. The vulnerability exists due to lack of sanitization of tensorflow function in quantizeanddequantizeop.cc which allows a remote attacker to cause the application to crash...

Denial Of Service (DoS)

tensorflow is vulnerable to denial of service. The vulnerability exists in the BincountOp function in bincountop.cc due to check fail inDenseBincount which allows an attacker to cause an application crash by providing malicious input...

Denial Of Service (DoS)

tensorflow is vulnerable to denial of service DoS attacks. A malicious user is able to pass an empty input with valid filter and padding sizes which outputs all-zeros, causing a division-by-zero exception leading to an application crash...

Denial Of Service (DoS)

tensorflow is vulnerable to denial of service. The vulnerability exists due to the check failure in the randomop.cc and randompoissonop.cc, allowing an attacker to crash the application by providing a large input shapes and rates...

Denial Of Service (DoS)

tensorflow is vulnerable to denial of service. The vulnerability exists in the Compute function of bincountop.cc When the SparseBincount is given inputs for indices, values, and denseshape parameters, allowing an attacker to cause an application crash through the segmentation fault...

CVE-2022-36013

TensorFlow is an open source platform for machine learning. When mlir::tfg::GraphDefImporter::ConvertNodeDef tries to convert NodeDefs without an op name, it crashes. We have patched the issue in GitHub commit a0f0b9a21c9270930457095092f558fbad4c03e5. The fix will be included in TensorFlow 2.10.0...

CVE-2022-36015

TensorFlow is an open source platform for machine learning. When RangeSize receives values that do not fit into an int64t, it crashes. We have patched the issue in GitHub commit 37e64539cd29fcfb814c4451152a60f5d107b0f0. The fix will be included in TensorFlow 2.10.0. We will also cherrypick this...

CVE-2022-36011

TensorFlow is an open source platform for machine learning. When mlir::tfg::ConvertGenericFunctionToFunctionDef is given empty function attributes, it gives a null dereference. We have patched the issue in GitHub commit 1cf45b831eeb0cab8655c9c7c5d06ec6f45fc41b. The fix will be included in...

CVE-2022-36014

TensorFlow is an open source platform for machine learning. When mlir::tfg::TFOp::nameAttr receives null type list attributes, it crashes. We have patched the issue in GitHub commits 3a754740d5414e362512ee981eefba41561a63a6 and a0f0b9a21c9270930457095092f558fbad4c03e5. The fix will be included in...

CVE-2022-36012

TensorFlow is an open source platform for machine learning. When mlir::tfg::ConvertGenericFunctionToFunctionDef is given empty function attributes, it crashes. We have patched the issue in GitHub commit ad069af92392efee1418c48ff561fd3070a03d7b. The fix will be included in TensorFlow 2.10.0. We wi...

CVE-2022-36016

TensorFlow is an open source platform for machine learning. When tensorflow::fulltype::SubstituteFromAttrs receives a FullTypeDef& t that is not exactly three args, it triggers a CHECK-fail instead of returning a status. We have patched the issue in GitHub commit...