Denial Of Service (DoS)

tensorflow is vulnerable to denial of service. The vulnerability exists due to the lack of input validation in the tf.rawops.QuantizedConv2D of quantizedconvops.cc, resulting in a null pointer dereferences, allowing an attacker to crash the application by providing zero-sized inputs...

Denial Of Service (DoS)

tensorflow is vulnerable to denial of service. The vulnerability exists because the GetDeviceForInput function of execute.cc does not properly handle empty resources allowing an attacker to crash the application through the null pointer dereferences when using eager mode...

Google TensorFlow Resource Management Error Vulnerability (CNVD-2022-44172)

Google TensorFlow is a suite of end-to-end open source platforms for machine learning from Google USA. A resource management error vulnerability exists in Google TensorFlow versions prior to 2.9.0, prior to 2.8.1, prior to 2.7.2, and prior to 2.6.4, which stems from the fact that tf.ragged.consta...

Google TensorFlow Input Validation Error Vulnerability (CNVD-2022-44173)

Google TensorFlow is a suite of end-to-end open source platforms for machine learning from Google USA. An input validation error vulnerability exists in Google TensorFlow versions prior to 2.9.0, 2.8.1, 2.7.2, and 2.6.4, which stems from the fact that tf.rawops.Conv3DBackpropFilterV2 does not ful...

Google TensorFlow Input Validation Error Vulnerability (CNVD-2022-44162)

Google TensorFlow, an end-to-end open source platform for machine learning from Google, Inc. is vulnerable to input validation errors in versions prior to 2.9.0, 2.8.1, 2.7.2, and 2.6.4, stemming from tf.rawops GetSessionTensor does not fully validate the input parameters and can be exploited to...

Google TensorFlow buffer overflow vulnerability (CNVD-2022-44163)

Google TensorFlow is an end-to-end open source platform for machine learning from Google, Inc. Google TensorFlow versions prior to 2.9.0, 2.8.1, 2.7.2 and 2.6.4 are vulnerable to buffer errors, which originate from tf.rawops. EditDistance has incomplete validation for implementations. An attacker...

Google TensorFlow Denial of Service Vulnerability (CNVD-2022-44165)

Google TensorFlow is an end-to-end open source platform for machine learning from Google, Inc. A security vulnerability exists in Google TensorFlow versions prior to 2.9.0, 2.8.1, 2.7.2, and 2.6.4, which stems from an application calling a tf .compat.v1. operation. An attacker could exploit this...

Google TensorFlow integer overflow vulnerability (CNVD-2022-44166)

Google TensorFlow, an end-to-end open source platform for machine learning from Google, Inc. is vulnerable to integer overflow in versions prior to 2.9.0, 2.8.1, 2.7.2, and 2.6.4, which originates from tf.rawops. SpaceToBatchND has an integer overflow problem. An attacker could use this...

Google TensorFlow Input Validation Error Vulnerability (CVE-2022-29192)

Google TensorFlow, an end-to-end open source platform for machine learning from Google, Inc. is vulnerable to an input validation error in versions prior to 2.9.0, 2.8.1, 2.7.2, and 2.6.4, which originates in tf.rawops QuantizeAndDequantizeV4Grad does not fully validate the input parameters and c...

Google TensorFlow Input Validation Error Vulnerability (CNVD-2022-44167)

Google TensorFlow, an end-to-end open source platform for machine learning from Google, Inc. is vulnerable to input validation errors in versions prior to 2.9.0, 2.8.1, 2.7.2, and 2.6.4, stemming from tf.rawops LoadAndRemapMatrix does not fully validate the input parameters and can be exploited t...

Google TensorFlow Input Validation Error Vulnerability (CNVD-2022-44169)

Google TensorFlow, an end-to-end open source platform for machine learning from Google, Inc. is vulnerable to an input validation error in versions prior to 2.9.0, 2.8.1, 2.7.2, and 2.6.4, which originates in tf.rawops LSTMBlockCell does not fully validate the input parameters and can be exploite...

Google TensorFlow code issue vulnerability (CNVD-2022-44164)

Google TensorFlow, an end-to-end open source platform for machine learning from Google, Inc. is vulnerable to a code issue in versions prior to 2.9.0, 2.8.1, 2.7.2, and 2.6.4, which stems from tf.rawops. SparseTensorDenseAdd has incomplete validation for the input parameters. No detailed...

Google TensorFlow Denial of Service Vulnerability (CNVD-2022-44170)

Google TensorFlow, an end-to-end open source platform for machine learning from Google, Inc. is vulnerable in versions prior to 2.9.0, 2.8.1, 2.7.2, and 2.6.4 due to a vulnerability in tf.rawops. UnsortedSegmentJoin has incomplete validation of the input parameters. An attacker could use this...

Google TensorFlow has an unspecified vulnerability

Google TensorFlow is an end-to-end open source platform for machine learning from Google, Inc. A security vulnerability exists in Google TensorFlow versions prior to 2.9.0, 2.8.1, 2.7.2, and 2.6.4, which stems from an invalid resource handle provided to the application when , multiple tensorflow...

Google TensorFlow code issue vulnerability (CNVD-2022-44171)

Google TensorFlow is an end-to-end open source platform for machine learning from Google, Inc. Google TensorFlow versions prior to 2.9.0, 2.8.1, 2.7.2, and 2.6.4 are vulnerable to a code issue stemming from tf.rawops. QuantizedConv2D does not fully validate input parameters. No detailed...

Google TensorFlow Input Validation Error Vulnerability (CNVD-2022-44160)

Google TensorFlow, an end-to-end open source platform for machine learning from Google, Inc. is vulnerable to input validation errors in versions prior to 2.9.0, 2.8.1, 2.7.2, and 2.6.4, stemming from tf.rawops DeleteSessionTensor does not fully validate the input parameters and can be exploited ...

Denial Of Service (DoS)

tensorflow is vulnerable to denial of service. Lack of proper validation of input arguments to tf.rawops.QuantizeAndDequantizeV4Grad leads to CHECK-failure, causing an applicaiton crash...

Denial Of Service (DoS)

tensorflow is vulnerable to denial of service. Failure to check the input to tf.rawops.SparseTensorDenseAdd causes a nullptr during kernel execution , triggering a denial of service attack...

Denial Of Service (DoS)

tensorflow is vulnerable to denial of service. Failure to check the input to tf.rawops.LSTMBlockCell to validate ranks of any of the API call arguments causes a CHECK-failure , triggering a denial of service attack...

Denial Of Service (DoS)

tensorflow is vulnerable to denial of service. An attacker is able to send malicious input to tf.rawops.TensorSummaryV2, causing a CHECK-failure...