Denial Of Service (DoS)

tensorflow is vulnerable to denial of service DoS attacks. A malicious user is able to cause denial of service conditions by providing an input value that does not fit into an int64t through RangeSize, causing the application to crash...

Denial Of Service (DoS)

tensorflow is vulnerable to denial of service DoS attacks. A malicious user is able to cause denial of service conditions by providing the elementshape in TensorListFromTensor with a rank greater than one, which gives a CHECK fail, triggering an application crash...

Denial Of Service (DoS)

tensorflow is vulnerable to denial of service DoS attacks. A malicious user is able to cause a null dereference by providing empty function attributes to the mlir::tfg::ConvertGenericFunctionToFunctionDef function, causing the application to crash...

Denial Of Service (DoS)

tensorflow is vulnerable to denial of service attacks. The vulnerability exists due to lack of sanitization of tensorflow function in quantizeanddequantizeop.cc which allows a remote attacker to cause the application to crash...

Denial Of Service (DoS)

tensorflow is vulnerable to denial of service. The vulnerability exists in the BincountOp function in bincountop.cc due to check fail inDenseBincount which allows an attacker to cause an application crash by providing malicious input...

Denial Of Service (DoS)

tensorflow is vulnerable to denial of service DoS attacks. A malicious user is able to pass an empty input with valid filter and padding sizes which outputs all-zeros, causing a division-by-zero exception leading to an application crash...

Denial Of Service (DoS)

tensorflow is vulnerable to denial of service. The vulnerability exists due to the check failure in the randomop.cc and randompoissonop.cc, allowing an attacker to crash the application by providing a large input shapes and rates...

Denial Of Service (DoS)

tensorflow is vulnerable to denial of service. The vulnerability exists in the Compute function of bincountop.cc When the SparseBincount is given inputs for indices, values, and denseshape parameters, allowing an attacker to cause an application crash through the segmentation fault...

CVE-2022-36013

TensorFlow is an open source platform for machine learning. When mlir::tfg::GraphDefImporter::ConvertNodeDef tries to convert NodeDefs without an op name, it crashes. We have patched the issue in GitHub commit a0f0b9a21c9270930457095092f558fbad4c03e5. The fix will be included in TensorFlow 2.10.0...

CVE-2022-36015

TensorFlow is an open source platform for machine learning. When RangeSize receives values that do not fit into an int64t, it crashes. We have patched the issue in GitHub commit 37e64539cd29fcfb814c4451152a60f5d107b0f0. The fix will be included in TensorFlow 2.10.0. We will also cherrypick this...

CVE-2022-36014

TensorFlow is an open source platform for machine learning. When mlir::tfg::TFOp::nameAttr receives null type list attributes, it crashes. We have patched the issue in GitHub commits 3a754740d5414e362512ee981eefba41561a63a6 and a0f0b9a21c9270930457095092f558fbad4c03e5. The fix will be included in...

CVE-2022-36011

TensorFlow is an open source platform for machine learning. When mlir::tfg::ConvertGenericFunctionToFunctionDef is given empty function attributes, it gives a null dereference. We have patched the issue in GitHub commit 1cf45b831eeb0cab8655c9c7c5d06ec6f45fc41b. The fix will be included in...

CVE-2022-36016

TensorFlow is an open source platform for machine learning. When tensorflow::fulltype::SubstituteFromAttrs receives a FullTypeDef& t that is not exactly three args, it triggers a CHECK-fail instead of returning a status. We have patched the issue in GitHub commit...

CVE-2022-36017

TensorFlow is an open source platform for machine learning. If Requantize is given inputmin, inputmax, requestedoutputmin, requestedoutputmax tensors of a nonzero rank, it results in a segfault that can be used to trigger a denial of service attack. We have patched the issue in GitHub commit...

CVE-2022-36012

TensorFlow is an open source platform for machine learning. When mlir::tfg::ConvertGenericFunctionToFunctionDef is given empty function attributes, it crashes. We have patched the issue in GitHub commit ad069af92392efee1418c48ff561fd3070a03d7b. The fix will be included in TensorFlow 2.10.0. We wi...

CVE-2022-36027

TensorFlow is an open source platform for machine learning. When converting transposed convolutions using per-channel weight quantization the converter segfaults and crashes the Python process. We have patched the issue in GitHub commit aa0b852a4588cea4d36b74feb05d93055540b450. The fix will be...

CVE-2022-35994

TensorFlow is an open source platform for machine learning. When CollectiveGather receives an scalar input input, it gives a CHECK fails that can be used to trigger a denial of service attack. We have patched the issue in GitHub commit c1f491817dec39a26be3c574e86a88c30f3c4770. The fix will be...

CVE-2022-35995

TensorFlow is an open source platform for machine learning. When AudioSummaryV2 receives an input samplerate with more than one element, it gives a CHECK fails that can be used to trigger a denial of service attack. We have patched the issue in GitHub commit...

CVE-2022-36001

TensorFlow is an open source platform for machine learning. When DrawBoundingBoxes receives an input boxes that is not of dtype float, it gives a CHECK fail that can trigger a denial of service attack. We have patched the issue in GitHub commit da0d65cdc1270038e72157ba35bf74b85d9bda11. The fix wi...

CVE-2022-36002

TensorFlow is an open source platform for machine learning. When Unbatch receives a nonscalar input id, it gives a CHECK fail that can trigger a denial of service attack. We have patched the issue in GitHub commit 4419d10d576adefa36b0e0a9425d2569f7c0189f. The fix will be included in TensorFlow...