Google TensorFlow Denial of Service Vulnerability (CNVD-2021-63078)

Google TensorFlow is an end-to-end open source machine learning platform. A denial of service vulnerability exists in Google TensorFlow. A local attacker could exploit this vulnerability to cause a denial of service condition...

Google TensorFlow Arbitrary Code Execution Vulnerability

Google TensorFlow is an end-to-end open source machine learning platform. An arbitrary code execution vulnerability exists in Google TensorFlow versions prior to 2.6.0. The vulnerability stems from YAML deserialization. An attacker can exploit this vulnerability to execute arbitrary code...

Google TensorFlow TFLite Denial of Service Vulnerability (CNVD-2021-63064)

Google TensorFlow is an end-to-end open source machine learning platform. A security vulnerability exists in Google TensorFlow TFLite. An attacker can exploit the vulnerability to cause a denial of service...

Google TensorFlow Denial of Service Vulnerability (CNVD-2021-63073)

Google TensorFlow is an end-to-end open source machine learning platform. A security error vulnerability exists in Google TensorFlow versions prior to 2.6.0. A local attacker could exploit this vulnerability to cause a denial of service...

Google TensorFlow buffer overflow vulnerability (CNVD-2021-64539)

Google TensorFlow is an end-to-end open source platform for machine learning from Google, Inc. A security vulnerability exists in Google TensorFlow, which could be exploited by an attacker to bind a reference to a null pointer in all operations of type tf.rawops.MatrixSetDiagV to cause undefined...

Google TensorFlow buffer overflow vulnerability (CNVD-2021-64534)

A buffer overflow vulnerability exists in Google TensorFlow, an end-to-end open source platform for machine learning from Google, Inc. FractionalAvgPoolGrad" implementation may access data outside the boundaries of the heap allocation buffer. No details of the vulnerability are currently availabl...

Google TensorFlow Denial of Service Vulnerability (CNVD-2021-63079)

Google TensorFlow is an end-to-end open source machine learning platform. A denial of service vulnerability exists in Google TensorFlow. A local attacker could exploit this vulnerability to cause a denial of service condition...

Google TensorFlow TFLite Information Disclosure Vulnerability

Google TensorFlow is an end-to-end open source machine learning platform. An information disclosure vulnerability exists in Google TensorFlow TFLite. The vulnerability is due to a heap out-of-bounds read flaw in expanddims.cc in TFLite, which can be exploited by an attacker to obtain sensitive...

Google TensorFlow 'tf.raw_ops.UnravelIndex' Denial of Service Vulnerability

Google TensorFlow is an end-to-end open source machine learning platform. A denial of service vulnerability exists in Google TensorFlow 'tf.rawops.UnravelIndex'. An attacker can exploit the vulnerability to cause a denial of service...

Google TensorFlow buffer overflow vulnerability (CNVD-2021-64538)

Google TensorFlow is an end-to-end open-source platform for machine learning from Google, Inc. A security vulnerability exists in Google TensorFlow, which could be exploited by an attacker to bind a reference to a null pointer in all operations of type "tf.rawops.MatrixDiagV" to cause undefined...

Google TensorFlow tf.raw_ops.QuantizeV2 Information Disclosure Vulnerability

Google TensorFlow is an end-to-end open source machine learning platform. A security vulnerability exists in tf.rawops.QuantizeV2 in Google TensorFlow versions prior to 2.6.0. An attacker can exploit the vulnerability to obtain sensitive information...

Google TensorFlow buffer overflow vulnerability (CNVD-2021-64542)

Google TensorFlow is an end-to-end open source platform for machine learning from Google, Inc. "A similar attack could occur in "BoostedTreesCalculateBestFeatureSplitV2"...

Google TensorFlow integer overflow vulnerability (CNVD-2021-64532)

Google TensorFlow is an end-to-end open source platform for machine learning from Google, Inc. A security vulnerability exists in Google TensorFlow caused by converting a signed integer value to an unsigned integer value and then allocating memory based on that value. No details of the...

Google TensorFlow MKL Code Execution Vulnerability

Google TensorFlow is an end-to-end open source machine learning platform. A security vulnerability exists in Google TensorFlow versions prior to 2.6.0. An attacker can exploit the vulnerability to execute arbitrary code on the system...

Google TensorFlow Denial of Service Vulnerability (CNVD-2021-64541)

Google TensorFlow is an end-to-end open source platform for machine learning from Google, Inc. A security vulnerability exists in Google TensorFlow, which could be exploited by an attacker to cause a denial of service in "boostedtreescreatequantilestream resource" using the negation parameter...

CVE-2021-37677

TensorFlow is an end-to-end open source platform for machine learning. In affected versions the shape inference code for tf.rawops.Dequantize has a vulnerability that could trigger a denial of service via a segfault if an attacker provides invalid arguments. The shape inference implementation use...

CVE-2021-37677

TensorFlow is an end-to-end open source platform for machine learning. In affected versions the shape inference code for tf.rawops.Dequantize has a vulnerability that could trigger a denial of service via a segfault if an attacker provides invalid arguments. The shape inference implementation use...

CVE-2021-37678

TensorFlow is an end-to-end open source platform for machine learning. In affected versions TensorFlow and Keras can be tricked to perform arbitrary code execution when deserializing a Keras model from YAML format. The implementation uses yaml.unsafeload which can perform arbitrary code execution...

CVE-2021-37679

TensorFlow is an end-to-end open source platform for machine learning. In affected versions it is possible to nest a tf.mapfn within another tf.mapfn call. However, if the input tensor is a RaggedTensor and there is no function signature provided, code assumes the output is a fully specified tens...

CVE-2021-37685

TensorFlow is an end-to-end open source platform for machine learning. In affected versions TFLite's expanddims.cc contains a vulnerability which allows reading one element outside of bounds of heap allocated data. If axis is a large negative value e.g., -100000, then after the first if it would...