CVE-2021-29576

CVE-2021-29576 is a confirmed heap buffer overflow in TensorFlow related to the tf.raw_ops.MaxPool3DGradGrad implementation. The root cause is that Pool3dParameters may be initialized with invalid data because the constructor’s validation (OP_REQUIRES) can fail before completion, and the code pat...

CVE-2021-29574: NULL Pointer Dereference

TensorFlow is an end-to-end open source platform for machine learning. The implementation of tf.rawops.MaxPool3DGradGrad exhibits undefined behavior by dereferencing null pointers backing attacker-supplied empty tensors. The...

CVE-2021-29576: Improper Restriction of Operations within the Bounds of a Memory Buffer

TensorFlow is an end-to-end open source platform for machine learning. The implementation of tf.rawops.MaxPool3DGradGrad is vulnerable to a heap buffer overflow. The...