Heap buffer overflow in `Conv3DBackprop*`

Impact Missing validation between arguments to tf.rawops.Conv3DBackprop operations can result in heap buffer overflows: python import tensorflow as tf inputsizes = tf.constant1, 1, 1, 1, 2, shape=5, dtype=tf.int32 filtertensor = tf.constant734.6274508233133, -10.0, -10.0, -10.0, -10.0, -10.0,...

CHECK-fail in SparseCross due to type confusion

Impact The API of tf.rawops.SparseCross allows combinations which would result in a CHECK-failure and denial of service: python import tensorflow as tf hashedoutput = False numbuckets = 1949315406 hashkey = 1869835877 outtype = tf.string internaltype = tf.string indices1 = tf.constant0, 6, shape=...

Session operations in eager mode lead to null pointer dereferences

Impact In eager mode default in TF 2.0 and later, session operations are invalid. However, users could still call the raw ops associated with them and trigger a null pointer dereference: python import tensorflow as tf tf.rawops.GetSessionTensorhandle='\x12\x1a\x07',dtype=4 python import tensorflo...

GHSA-62GX-355R-9FHG Session operations in eager mode lead to null pointer dereferences

Impact In eager mode default in TF 2.0 and later, session operations are invalid. However, users could still call the raw ops associated with them and trigger a null pointer dereference: python import tensorflow as tf tf.rawops.GetSessionTensorhandle='\x12\x1a\x07',dtype=4 python import tensorflo...

Division by zero in `Conv3D`

Impact A malicious user could trigger a division by 0 in Conv3D implementation: python import tensorflow as tf inputtensor = tf.constant, shape=0, 0, 0, 0, 0, dtype=tf.float32 filtertensor = tf.constant, shape=0, 0, 0, 0, 0, dtype=tf.float32 tf.rawops.Conv3Dinput=inputtensor, filter=filtertensor,...

GHSA-84MW-34W6-2Q43 Null pointer dereference via invalid Ragged Tensors

Impact Calling tf.rawops.RaggedTensorToVariant with arguments specifying an invalid ragged tensor results in a null pointer dereference: python import tensorflow as tf inputtensor = tf.constant, shape=0, 0, 0, 0, 0, dtype=tf.float32 filtertensor = tf.constant, shape=0, 0, 0, 0, 0, dtype=tf.float3...

Null pointer dereference via invalid Ragged Tensors

Impact Calling tf.rawops.RaggedTensorToVariant with arguments specifying an invalid ragged tensor results in a null pointer dereference: python import tensorflow as tf inputtensor = tf.constant, shape=0, 0, 0, 0, 0, dtype=tf.float32 filtertensor = tf.constant, shape=0, 0, 0, 0, 0, dtype=tf.float3...

Reference binding to null pointer in `MatrixDiag*` ops

Impact The implementation of MatrixDiag operations does not validate that the tensor arguments are non-empty: cc numrows = context-input2.flat0; numcols = context-input3.flat0; paddingvalue = context-input4.flat0; Thus, users can trigger null pointer dereferences if any of the above tensors are...

GHSA-HC6C-75P4-HMQ4 Reference binding to null pointer in `MatrixDiag*` ops

Impact The implementation of MatrixDiag operations does not validate that the tensor arguments are non-empty: cc numrows = context-input2.flat0; numcols = context-input3.flat0; paddingvalue = context-input4.flat0; Thus, users can trigger null pointer dereferences if any of the above tensors are...

GHSA-8H46-5M9H-7553 Heap out of bounds write in `RaggedBinCount`

Impact If the splits argument of RaggedBincount does not specify a valid SparseTensor, then an attacker can trigger a heap buffer overflow: python import tensorflow as tf tf.rawops.RaggedBincountsplits=7,8, values= 5, 16, 51, 76, 29, 27, 54, 95,\ size= 59, weights= 0, 0, 0, 0, 0, 0, 0, 0,...

Heap out of bounds write in `RaggedBinCount`

Impact If the splits argument of RaggedBincount does not specify a valid SparseTensor, then an attacker can trigger a heap buffer overflow: python import tensorflow as tf tf.rawops.RaggedBincountsplits=7,8, values= 5, 16, 51, 76, 29, 27, 54, 95,\ size= 59, weights= 0, 0, 0, 0, 0, 0, 0, 0,...

Type confusion during tensor casts lead to dereferencing null pointers

Impact Calling TF operations with tensors of non-numeric types when the operations expect numeric tensors result in null pointer dereferences. There are multiple ways to reproduce this, listing a few examples here: python import tensorflow as tf import numpy as np data =...

GHSA-452G-F7FP-9JF7 Type confusion during tensor casts lead to dereferencing null pointers

Impact Calling TF operations with tensors of non-numeric types when the operations expect numeric tensors result in null pointer dereferences. There are multiple ways to reproduce this, listing a few examples here: python import tensorflow as tf import numpy as np data =...

Heap buffer overflow in `RaggedBinCount`

Impact If the splits argument of RaggedBincount does not specify a valid SparseTensor, then an attacker can trigger a heap buffer overflow: python import tensorflow as tf tf.rawops.RaggedBincountsplits=0, values=1,1,1,1,1, size=5, weights=1,2,3,4, binaryoutput=False This will cause a read from...

GHSA-4278-2V5V-65R4 Heap buffer overflow in `RaggedBinCount`

Impact If the splits argument of RaggedBincount does not specify a valid SparseTensor, then an attacker can trigger a heap buffer overflow: python import tensorflow as tf tf.rawops.RaggedBincountsplits=0, values=1,1,1,1,1, size=5, weights=1,2,3,4, binaryoutput=False This will cause a read from...

Google TensorFlow Denial of Service Vulnerability (CNVD-2021-37608)

Google TensorFlow is a suite of end-to-end open source platforms for machine learning from Google USA. A security vulnerability exists in Google TensorFlow. An attacker can exploit this vulnerability to cause a denial of service situation...

Google TensorFlow RaggedBinCount Denial of Service Vulnerability

Google TensorFlow is a suite of end-to-end open source platforms for machine learning from Google USA. A security vulnerability exists in Google TensorFlow RaggedBinCount. A local attacker could exploit this vulnerability to cause a denial of service...

Google TensorFlow Denial of Service Vulnerability (CNVD-2021-37609)

Google TensorFlow is a suite of end-to-end open source platforms for machine learning from Google USA. A security vulnerability exists in Google TensorFlow. A local attacker can exploit this vulnerability to cause a denial of service...

Google TensorFlow RaggedBinCount Denial of Service Vulnerability (CNVD-2021-37606)

Google TensorFlow is a suite of end-to-end open source platforms for machine learning from Google USA. A security vulnerability exists in Google TensorFlow RaggedBinCount, which is caused by a heap out-of-bounds write to "RaggedBinCount". An attacker could exploit this vulnerability to cause a...

Google TensorFlow tf.raw_ops.RaggedTensorToVariant Denial of Service Vulnerability

Google TensorFlow is a suite of end-to-end open source platforms for machine learning from Google USA. A security vulnerability exists in Google TensorFlow tf.rawops.RaggedTensorToVariant. A local attacker can exploit this vulnerability to cause a denial of service...