CVE-2022-41887

TensorFlow is an open source platform for machine learning. "tf.keras.losses.poisson" receives a "ypred" and "ytrue" that are passed through "functor::mul" in "BinaryOp". If the resulting dimensions overflow an "int32", TensorFlow will crash due to a size mismatch during broadcast assignment. We...

CVE-2022-41887: Incorrect Calculation of Buffer Size

TensorFlow is an open source platform for machine learning. tf.keras.losses.poisson receives a ypred and ytrue that are passed through functor::mul in BinaryOp. If the resulting dimensions overflow an int32, TensorFlow will crash due to a size mismatch during broadcast assignment. We have patched...