PT-2023-20229 · Google · Tensorflow

Name of the Vulnerable Software and Affected Versions: TensorFlow versions prior to 2.12.0 TensorFlow versions prior to 2.11.1 Description: TensorFlow is an open source platform for machine learning. Attackers using TensorFlow can access heap memory which is not in the control of the user, leadin...

PT-2023-21221 · Google · Tensorflow

Name of the Vulnerable Software and Affected Versions: TensorFlow versions prior to 2.12 TensorFlow version 2.11.1 and earlier Description: Constructing a tflite model with a parameter filter input channel of less than 1 gives a Floating Point Exception FPE. This issue affects TensorFlow, an...

PT-2023-20224 · Google · Tensorflow

Name of the Vulnerable Software and Affected Versions: TensorFlow versions prior to 2.12.0 and 2.11.1 Description: The issue occurs when ctx-step containter is a null pointer, causing the Lookup function to be executed with a null pointer. This can be triggered in certain scenarios, such as when...

PT-2023-20234 · Google · Tensorflow

Name of the Vulnerable Software and Affected Versions: TensorFlow versions prior to 2.11.1 TensorFlow versions prior to 2.12.0 Description: The function tf.raw ops.LookupTableImportV2 cannot handle scalars in the values parameter and gives a Null Pointer Exception NPE. TensorFlow is an open sourc...

PT-2023-20227 · Google · Tensorflow

Name of the Vulnerable Software and Affected Versions: TensorFlow versions prior to 2.12.0 and 2.11.1 Description: The issue is related to a floating point exception in the AudioSpectrogram function. The exception occurs when the stride is set to 0. This can be exploited by passing a stride value...

PT-2023-20228 · Google · Tensorflow

Name of the Vulnerable Software and Affected Versions: TensorFlow versions prior to 2.12.0 and 2.11.1 Description: Integer overflow occurs when 2^31 = num frames height width channels 2^32, for example, a Full HD screencast of at least 346 frames. This issue is related to the tf.io.decode gif...

PT-2023-20223 · Google · Tensorflow

Name of the Vulnerable Software and Affected Versions: TensorFlow versions prior to 2.12.0 TensorFlow versions prior to 2.11.1 Description: The issue is related to an integer overflow in the EditDistance function of TensorFlow, which can cause a deadlock when the hypothesis shape t is empty. This...

PT-2023-20232 · Google · Tensorflow

Name of the Vulnerable Software and Affected Versions: TensorFlow versions prior to 2.12.0 TensorFlow versions prior to 2.11.1 Description: TensorFlow is an open source platform for machine learning. The issue is a null point error in QuantizedMatMulWithBiasAndDequantize with MKL enabled. A fix i...

PT-2023-20316 · Google · Tensorflow

Name of the Vulnerable Software and Affected Versions: TensorFlow versions prior to 2.12.0 and 2.11.1 Description: The issue concerns the nn ops.fractional avg pool v2 and nn ops.fractional max pool v2 functions, which require the first and fourth elements of their pooling ratio parameter to be...

CBL Mariner 2.0 Security Update: tensorflow (CVE-2022-41895)

The version of tensorflow installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-41895 advisory. - TensorFlow is an open source platform for machine learning. If MirrorPadGrad is given outsize input...

CBL Mariner 2.0 Security Update: tensorflow (CVE-2022-41893)

The version of tensorflow installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-41893 advisory. - TensorFlow is an open source platform for machine learning. If tf.rawops.TensorListResize is given a...

CBL Mariner 2.0 Security Update: tensorflow (CVE-2022-41889)

The version of tensorflow installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-41889 advisory. - TensorFlow is an open source platform for machine learning. If a list of quantized tensors is assigned t...

CBL Mariner 2.0 Security Update: tensorflow (CVE-2022-41897)

The version of tensorflow installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-41897 advisory. - TensorFlow is an open source platform for machine learning. If FractionMaxPoolGrad is given outsize inpu...

CBL Mariner 2.0 Security Update: tensorflow (CVE-2022-41900)

The version of tensorflow installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-41900 advisory. - TensorFlow is an open source platform for machine learning. The security vulnerability results in...

CBL Mariner 2.0 Security Update: tensorflow (CVE-2022-41907)

The version of tensorflow installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-41907 advisory. - TensorFlow is an open source platform for machine learning. When tf.rawops.ResizeNearestNeighborGrad is...

CBL Mariner 2.0 Security Update: tensorflow (CVE-2022-41888)

The version of tensorflow installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-41888 advisory. - TensorFlow is an open source platform for machine learning. When running on GPU,...

CBL Mariner 2.0 Security Update: tensorflow (CVE-2022-41891)

The version of tensorflow installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-41891 advisory. - TensorFlow is an open source platform for machine learning. If tf.rawops.TensorListConcat is given...

CBL Mariner 2.0 Security Update: tensorflow (CVE-2022-41880)

The version of tensorflow installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-41880 advisory. - TensorFlow is an open source platform for machine learning. When the BaseCandidateSamplerOp function...

CBL Mariner 2.0 Security Update: tensorflow (CVE-2022-41896)

The version of tensorflow installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-41896 advisory. - TensorFlow is an open source platform for machine learning. If ThreadUnsafeUnigramCandidateSampler is...

CBL Mariner 2.0 Security Update: tensorflow (CVE-2022-41894)

The version of tensorflow installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-41894 advisory. - TensorFlow is an open source platform for machine learning. The reference kernel of the CONV3DTRANSPOSE...