CVE-2022-21729

Tensorflow is an Open Source Machine Learning Framework. The implementation of UnravelIndex is vulnerable to a division by zero caused by an integer overflow bug. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlo...

Heap-Based Buffer Overflow

MicroPython is vulnerable to a heap-based buffer overflow. The vulnerability is due to improper handling in the mpzasbytes function of the objint component when converting a zero integer to bytes, which allows an attacker to trigger a heap buffer overflow write and potentially execute malicious...