EUVD-2021-0422

Malware in sbrugna...

Google TensorFlow Input Validation Error Vulnerability (CNVD-2022-09873)

Google TensorFlow is a suite of end-to-end open source platforms for machine learning from Google USA. Google TensorFlow suffers from an input validation error vulnerability that can be exploited by an attacker to call tf.image.resize with a large input parameter, then the TensorFlow process will...

Integer overflow

TensorFlow is an open source platform for machine learning. In affected versions if tf.image.resize is called with a large input argument then the TensorFlow process will crash due to a CHECK-failure caused by an overflow. The number of elements in the output tensor is too much for the int64t typ...