The vulnerability of the IncrementOffset() function in the TensorFlow machine learning system, which allows a hacker to trigger a service failure.

The vulnerability of the IncrementOffset function in the TensorFlow machine learning system is related to the violation of the buffer’s initial boundary when processing the sizeofchunk value. Exploiting this vulnerability can allow an attacker to trigger a service failure...

AZL-38185 CVE-2022-42915 affecting package tensorflow for versions less than 2.16.1-1

curl before 7.86.0 has a double free. If curl is told to use an HTTP proxy for a transfer with a non-HTTPS URL, it sets up the connection to the remote server by issuing a CONNECT request to the proxy, and then tunnels the rest of the protocol through. An HTTP proxy might refuse this request HTTP...

TensorFlow vulnerable to heap out of bounds read in filesystem glob matching

Impact The general implementation for matching filesystem paths to globbing pattern is vulnerable to an access out of bounds of the array holding the directories: cc if !fs-Matchchildpath, dirsdirindex ... Since dirindex is unconditionaly incremented outside of the lambda function where the...

GHSA-9JJW-HF72-3MXW TensorFlow vulnerable to heap out of bounds read in filesystem glob matching

Impact The general implementation for matching filesystem paths to globbing pattern is vulnerable to an access out of bounds of the array holding the directories: cc if !fs-Matchchildpath, dirsdirindex ... Since dirindex is unconditionaly incremented outside of the lambda function where the...

Denial Of Service (DoS)

tensorflow is vulnerable to denial of service. The vulnerability exists due to a lack of validation of the FakeQuantWithMinMaxVarsPerChannel input allowing an attacker to bring the system into a failed 'CHECK' resulting in the system stalling...

Denial Of Service (DoS)

tensorflow is vulnerable to denial of service. The vulnerability exists because the library does not properly validate the quantize ops inputs, allowing an attacker to crash the application through the segmentation fault by passing a nonzero rank when QuantizedInstanceNorm is given xmin or xmax...

Denial Of Service (DoS)

tensorflow is vulnerable to denial of service. An attacker can crash the application through the segmentation fault by passing a nonzero rank when QuantizedAvgPool is given mininput or maxinput tensors to the quantizedpoolingops.cc...

Denial Of Service (DoS)

tensorflow is vulnerable to denial of service. An attacker can crash the application through the segmentation fault by passing a nonzero rank when QuantizedAvgPool is given mininput or maxinput tensors to the quantizedpoolingops.cc in eager mode...

AZL-38908 CVE-2022-1941 affecting package tensorflow for versions less than 2.16.1-1

A parsing vulnerability for the MessageSet type in the ProtocolBuffers versions prior to and including 3.16.1, 3.17.3, 3.18.2, 3.19.4, 3.20.1 and 3.21.5 for protobuf-cpp, and versions prior to and including 3.16.1, 3.17.3, 3.18.2, 3.19.4, 3.20.1 and 4.21.5 for protobuf-python can lead to out of...

Denial Of Service (DoS)

tensorflow is vulnerable to denial of service. The vulnerability exists in tensorslicewriter.cc and its respective header file because the dtypes are not properly checked when running Save and SaveSlices which allows an attacker to send unsupported dtypes causing an application crash...

Denial Of Service (DoS)

tensorflow is vulnerable to denial of service. The vulnerability exists in randomop.cc and randompoissonop.cc because the RandomPoissonV2 doesn't check the size for large input shape and rates which allows an attacker to send inputs that exceed the size check causing an application crash...

Denial Of Service (DoS)

tensorflow is vulnerable to denial of service. The vulnerability exists because the outputshape.AddDim function of avgpoolingop.cc does not properly check the ksize arguments, allowing an attacker to crash the application through the check failure...

Denial Of Service (DoS)

tensorflow is vulnerable to denial of service. The vulnerability exists Compute function of convgradinputops.h because the CPU/GPU kernels are not properly handled for empty outbackprop inputs which allows an attacker to cause an application crash by sending malicious inputs...

Denial Of Service (DoS)

tensorflow is vulnerable to denial of service. The vulnerability exists in the multiple functions in searchsortedop.cc due to an empty sortedinputs which allows an attacker to cause an application crash by providing malicious input...

Denial Of Service (DoS)

tensorflow is vulnerable to denial of service. The vulnerability exists because the outputshape.AddDim function of avgpoolingop.cc does not properly validate the input for originputshape, allowing an attacker to crash the application through the check failure...

Denial Of Service (DoS)

tensorflow is vulnerable to denial of service. The vulnerability exists because the OPREQUIRES function of lstmops.cc does not properly check the size validation for BlockLSTMGradV2, allowing an attacker to cause an application crash through the segmentation fault...

Denial Of Service (DoS)

tensorflow is vulnerable to denial of service. The vulnerability exists in Compute function of reshapeop.h because the number of elements size is not properly handled which allows an attacker to entry more than one element causing an application crash...

Denial Of Service (DoS)

tensorflow is vulnerable to denial of service. The vulnerability exists in Compute function of batchkernels.cc because the function doesn't handle nonscalar argument ids which allows an attacker to cause an application crash...

Denial Of Service (DoS)

tensorflow is vulnerable to denial of service. The vulnerability exists in Compute function of listkernels.cc because the it doesn't properly handle the size of numelements which allows an attacker to provide more than one element causing an application crash...

Denial Of Service (DoS)

tensorflow is vulnerable to denial of service. The vulnerability exists in Compute function of poolingops3d.cc because it doesn't properly validate the originputshape input which allows an attacker to bypass inputs which result in a check failure causing an application crash...