Lucene search
+L
PypaMost viewed

7311 matches found

PyPA
PyPA
added 2026/07/13 2:19 p.m.15 views

TensorFlow vulnerable to `CHECK` fail in `TensorListFromTensor`

ImpactWhen TensorListFromTensor receives an elementshape of a rank greater than one, it gives a CHECK fail that can trigger a denial of service attack.pythonimport tensorflow as tfarg0=tf.random.uniformshape=6, 6, 2, dtype=tf.bfloat16, maxval=Nonearg1=tf.random.uniformshape=6, 9, 1, 3,...

7.5CVSS6.9AI score0.00411EPSS
SaveExploits0References7Affected Software1
PyPA
PyPA
added 2026/07/13 2:19 p.m.15 views

TensorFlow vulnerable to segfault in `BlockLSTMGradV2`

ImpactThe implementation of BlockLSTMGradV2 does not fully validate its inputs. - wci, wcf, wco, b must be rank 1 - w, csprev, hprev must be rank 2 - x must be rank 3This results in a a segfault that can be used to trigger a denial of service attack.pythonimport tensorflow as tfusepeephole =...

7.5CVSS6.9AI score0.00424EPSS
SaveExploits0References7Affected Software1
PyPA
PyPA
added 2026/07/13 2:19 p.m.15 views

TensorFlow vulnerable to `CHECK` fail in `SetSize`

ImpactWhen SetSize receives an input setshape that is not a 1D tensor, it gives a CHECK fails that can be used to trigger a denial of service attack.pythonimport tensorflow as tfarg0=1arg1=1,1arg2=1arg3=Truearg4=''tf.rawops.SetSizesetindices=arg0, setvalues=arg1, setshape=arg2,...

7.5CVSS6.9AI score0.00411EPSS
SaveExploits0References7Affected Software1
PyPA
PyPA
added 2026/07/13 2:19 p.m.15 views

TensorFlow vulnerable to Int overflow in `RaggedRangeOp`

ImpactThe RaggedRangOp function takes an argument limits that is eventually used to construct a TensorShape as an int64. If limits is a very large float, it can overflow when converted to an int64. This triggers an InvalidArgument but also throws an abort signal that crashes the...

7.5CVSS7AI score0.00567EPSS
SaveExploits0References8Affected Software1
PyPA
PyPA
added 2026/07/13 2:19 p.m.15 views

TensorFlow vulnerable to `CHECK` fail in `DrawBoundingBoxes`

ImpactWhen DrawBoundingBoxes receives an input boxes that is not of dtype float, it gives a CHECK fail that can trigger a denial of service attack.pythonimport tensorflow as tfimport numpy as nparg0=tf.constantvalue=np.random.randomsize=1, 3, 2, 3, shape=1, 3, 2, 3,...

7.5CVSS6.9AI score0.00411EPSS
SaveExploits0References7Affected Software1
PyPA
PyPA
added 2026/07/13 2:19 p.m.15 views

TensorFlow vulnerable to `CHECK` failures in `AvgPool3DGrad`

ImpactThe implementation of AvgPool3DGradOp does not fully validate the input originputshape. This results in an overflow that results in a CHECK failure which can be used to trigger a denial of service attack:pythonimport tensorflow as tfksize = 1, 1, 1, 1, 1strides = 1, 1, 1, 1, 1padding =...

7.5CVSS7AI score0.00398EPSS
SaveExploits0References7Affected Software1
PyPA
PyPA
added 2026/07/13 2:19 p.m.15 views

TensorFlow vulnerable to floating point exception in `Conv2D`

ImpactIf Conv2D is given empty input and the filter and padding sizes are valid, the output is all-zeros. This causes division-by-zero floating point exceptions that can be used to trigger a denial of service attack.pythonimport tensorflow as tfimport numpy as npwith tf.device"CPU": also can be...

7.5CVSS6.9AI score0.00411EPSS
SaveExploits0References7Affected Software1
PyPA
PyPA
added 2026/07/13 2:19 p.m.15 views

TensorFlow vulnerable to `CHECK` fail in `Unbatch`

ImpactWhen Unbatch receives a nonscalar input id, it gives a CHECK fail that can trigger a denial of service attack.pythonimport tensorflow as tfimport numpy as nparg0=tf.constantvalue=np.random.randomsize=3, 3, 1, dtype=tf.float64arg1=tf.constantvalue=np.random.randint0,100,size=3, 3, 1,...

7.5CVSS6.9AI score0.00411EPSS
SaveExploits0References7Affected Software1
PyPA
PyPA
added 2026/07/13 2:19 p.m.15 views

TensorFlow vulnerable to null-dereference in `mlir::tfg::GraphDefImporter::ConvertNodeDef`

ImpactWhen mlir::tfg::GraphDefImporter::ConvertNodeDef tries to convert NodeDefs without an op name, it crashes.cppStatus GraphDefImporter::ConvertNodeDefOpBuilder , ConversionState , const NodeDef VLOG4 opdef; else auto it = functionopdefs.findnode.op; if it == functionopdefs.end return...

7.5CVSS7AI score0.00567EPSS
SaveExploits0References8Affected Software1
PyPA
PyPA
added 2026/07/13 2:19 p.m.15 views

TensorFlow vulnerable to assertion fail on MLIR empty edge names

ImpactWhen mlir::tfg::ConvertGenericFunctionToFunctionDef is given empty function attributes, it crashes.cpp// We pre-allocate the array of operands and populate it using the// outputnametoposition and controloutputtoposition populated// previously.SmallVector retvalsfunc.retsize +...

7.5CVSS7AI score0.00567EPSS
SaveExploits0References8Affected Software1
PyPA
PyPA
added 2026/07/13 2:19 p.m.15 views

TensorFlow vulnerable to `CHECK`-fail in `tensorflow::full_type::SubstituteFromAttrs`

ImpactWhen tensorflow::fulltype::SubstituteFromAttrs receives a FullTypeDef& t that is not exactly three args, it triggers a CHECK-fail instead of returning a status.cppStatus SubstituteForEachAttrMap& attrs, FullTypeDef& t DCHECKEQt.argssize, 3; const auto& cont = t.args0; const auto& tmpl =...

7.5CVSS7AI score0.00567EPSS
SaveExploits0References8Affected Software1
PyPA
PyPA
added 2026/07/13 2:19 p.m.15 views

TensorFlow vulnerable to integer overflow in math ops

ImpactWhen RangeSize receives values that do not fit into an int64t, it crashes.cpp auto size = std::isintegral::value ? Eigen::numext::abslimit - start + Eigen::numext::absdelta - T1 / Eigen::numext::absdelta : Eigen::numext::ceil Eigen::numext::abslimit - start / delta; // This check does not...

7.5CVSS7AI score0.00567EPSS
SaveExploits0References8Affected Software1
PyPA
PyPA
added 2026/07/13 2:19 p.m.15 views

TensorFlow vulnerable to `CHECK` fail in `DenseBincount`

ImpactDenseBincount assumes its input tensor weights to either have the same shape as its input tensor input or to be length-0. A different weights shape will trigger a CHECK fail that can be used to trigger a denial of service attack.pythonimport tensorflow as tfbinaryoutput = Trueinput =...

7.5CVSS6.9AI score0.00411EPSS
SaveExploits0References7Affected Software1
PyPA
PyPA
added 2026/07/13 2:19 p.m.15 views

TensorFlow segfault TFLite converter on per-channel quantized transposed convolutions

ImpactWhen converting transposed convolutions using per-channel weight quantization the converter segfaults and crashes the Python process.pythonimport tensorflow as tfclass QuantConv2DTransposedtf.keras.layers.Layer: def buildself, inputshape: self.kernel = self.addweight"kernel", 3, 3,...

7.5CVSS6.9AI score0.00619EPSS
SaveExploits1References8Affected Software1
PyPA
PyPA
added 2026/07/09 4:49 p.m.15 views

TensorFlow vulnerable to `CHECK` failure in `SobolSample` via missing validation

ImpactThe implementation of SobolSampleOp is vulnerable to a denial of service via CHECK-failure assertion failure caused by assuming input0, input1, and input2 to be scalar.pythonimport tensorflow as tftf.rawops.SobolSampledim=tf.constant1,0, numresults=tf.constant1, skip=tf.constant1 PatchesWe...

7.5CVSS6.9AI score0.00457EPSS
SaveExploits0References7Affected Software1
PyPA
PyPA
added 2026/07/09 4:49 p.m.15 views

TensorFlow vulnerable to OOB read in `Gather_nd` in TF Lite

ImpactThe GatherNd function takes arguments that determine the sizes of inputs and outputs. If the inputs given are greater than or equal to the sizes of the outputs, an out-of-bounds memory read is triggered. PatchesWe have patched the issue in GitHub commit...

9.1CVSS7AI score0.00458EPSS
SaveExploits0References8Affected Software1
PyPA
PyPA
added 2026/07/09 4:49 p.m.15 views

TensorFlow vulnerable to OOB read in `Gather_nd` in TF Lite

ImpactThe GatherNd function takes arguments that determine the sizes of inputs and outputs. If the inputs given are greater than or equal to the sizes of the outputs, an out-of-bounds memory read is triggered. PatchesWe have patched the issue in GitHub commit...

9.1CVSS7AI score0.00458EPSS
SaveExploits0References8Affected Software1
PyPA
PyPA
added 2026/07/09 4:49 p.m.15 views

Core dump when loading TFLite models with quantization in TensorFlow

ImpactCertain TFLite models that were created using TFLite model converter would crash when loaded in the TFLite interpreter. The culprit is that during quantization the scale of values could be greater than 1 but code was always assuming sub-unit scaling.Thus, since code was calling...

5.5CVSS6.2AI score0.00316EPSS
SaveExploits1References12Affected Software1
PyPA
PyPA
added 2026/07/09 4:49 p.m.15 views

Core dump when loading TFLite models with quantization in TensorFlow

ImpactCertain TFLite models that were created using TFLite model converter would crash when loaded in the TFLite interpreter. The culprit is that during quantization the scale of values could be greater than 1 but code was always assuming sub-unit scaling.Thus, since code was calling...

5.5CVSS6.2AI score0.00316EPSS
SaveExploits1References12Affected Software1
PyPA
PyPA
added 2026/07/09 4:49 p.m.15 views

TensorFlow vulnerable to `CHECK` fail in `Conv2DBackpropInput`

ImpactWhen Conv2DBackpropInput receives empty outbackprop inputs e.g. 3, 1, 0, 1, the current CPU/GPU kernels CHECK fail one with dnnl, the other with cudnn. This can be used to trigger a denial of service attack.pythonimport tensorflow as tfimport numpy as npinputsizes = 3, 1, 1, 2filter =...

7.5CVSS6.9AI score0.00411EPSS
SaveExploits0References7Affected Software1
PyPA
PyPA
added 2026/07/09 4:49 p.m.15 views

Segfault if `tf.histogram_fixed_width` is called with NaN values in TensorFlow

ImpactThe implementation of tf.histogramfixedwidth is vulnerable to a crash when the values array contain NaN elements:pythonimport tensorflow as tfimport numpy as nptf.histogramfixedwidthvalues=np.nan, valuerange=1,2The implementation assumes that all floating point operations are defined and th...

5.5CVSS6.2AI score0.00314EPSS
SaveExploits1References13Affected Software1
PyPA
PyPA
added 2026/07/09 4:49 p.m.15 views

Segfault due to missing support for quantized types

ImpactThere is a potential for segfault / denial of service in TensorFlow by calling tf.compat.v1. ops which don't yet have support for quantized types added after migration to TF 2.x:pythonimport numpy as npimport tensorflow as...

5.5CVSS6.2AI score0.00317EPSS
SaveExploits1References12Affected Software1
PyPA
PyPA
added 2026/07/09 4:49 p.m.15 views

Missing validation causes denial of service via `Conv3DBackpropFilterV2`

ImpactThe implementation of tf.rawops.UnsortedSegmentJoin does not fully validate the input arguments. This results in a CHECK-failure which can be used to trigger a denial of service attack:pythonimport tensorflow as tftf.strings.unsortedsegmentjoin inputs='123', segmentids=0, numsegments=-1The...

5.5CVSS6.2AI score0.00346EPSS
SaveExploits1References13Affected Software1
PyPA
PyPA
added 2026/07/09 4:49 p.m.15 views

Denial of service in `tf.ragged.constant` due to lack of validation

ImpactThe implementation of tf.ragged.constant does not fully validate the input arguments. This results in a denial of service by consuming all available memory:pythonimport tensorflow as tftf.ragged.constantpylist=,raggedrank=8968073515812833920 PatchesWe have patched the issue in GitHub commit...

5.5CVSS6.2AI score0.00316EPSS
SaveExploits1References12Affected Software1
PyPA
PyPA
added 2026/07/09 4:49 p.m.15 views

Missing validation causes denial of service via `UnsortedSegmentJoin`

ImpactThe implementation of tf.rawops.UnsortedSegmentJoin does not fully validate the input arguments. This results in a CHECK-failure which can be used to trigger a denial of service attack:pythonimport tensorflow as tftf.rawops.UnsortedSegmentJoin inputs=tf.constant"this", shape=12,...

5.5CVSS6.2AI score0.00317EPSS
SaveExploits1References11Affected Software1
PyPA
PyPA
added 2026/07/09 4:49 p.m.15 views

Missing validation causes denial of service via `StagePeek`

ImpactThe implementation of tf.rawops.StagePeek does not fully validate the input arguments. This results in a CHECK-failure which can be used to trigger a denial of service attack:pythonimport tensorflow as tfindex = tf.constant, shape=0, dtype=tf.int32tf.rawops.StagePeekindex=index,...

5.5CVSS6.2AI score0.00317EPSS
SaveExploits1References11Affected Software1
PyPA
PyPA
added 2026/07/09 4:49 p.m.15 views

Missing validation crashes `QuantizeAndDequantizeV4Grad`

ImpactThe implementation of tf.rawops.QuantizeAndDequantizeV4Grad does not fully validate the input arguments. This results in a CHECK-failure which can be used to trigger a denial of service attack:pythonimport tensorflow as tftf.rawops.QuantizeAndDequantizeV4Grad gradients=tf.constant1,...

5.5CVSS6.2AI score0.0034EPSS
SaveExploits1References11Affected Software1
PyPA
PyPA
added 2026/07/09 4:49 p.m.15 views

Missing validation causes `TensorSummaryV2` to crash

ImpactThe implementation of tf.rawops.TensorSummaryV2 does not fully validate the input arguments. This results in a CHECK-failure which can be used to trigger a denial of service attack:pythonimport numpy as npimport tensorflow as tftf.rawops.TensorSummaryV2 tag=np.array'test', tensor=np.array3,...

5.5CVSS6.2AI score0.00317EPSS
SaveExploits1References11Affected Software1
PyPA
PyPA
added 2026/07/09 4:49 p.m.15 views

Tryton vulnerable to arbitrary command execution

The safeeval function in trytond in Tryton before 2.4.15, 2.6.x before 2.6.14, 2.8.x before 2.8.11, 3.0.x before 3.0.7, and 3.2.x before 3.2.3 allows remote authenticated users to execute arbitrary commands via shell metacharacters in 1 the collection.domain in the webdav module or 2 the formula...

9CVSS7.3AI score0.02626EPSS
SaveExploits0References9Affected Software1
PyPA
PyPA
added 2026/07/09 4:49 p.m.15 views

OpenStack Keystone and other components vulnerable to Improper Certificate Validation

HTTPSConnections in OpenStack Keystone 2013, OpenStack Compute 2013.1, and possibly other OpenStack components, fail to validate server-side SSL certificates...

5.9CVSS6.4AI score0.00962EPSS
SaveExploits1References14Affected Software1
PyPA
PyPA
added 2026/07/09 4:49 p.m.15 views

Zope XSS Vulnerability

Cross-site scripting XSS vulnerability in Zope 2.8.x before 2.8.12, 2.9.x before 2.9.12, 2.10.x before 2.10.11, 2.11.x before 2.11.6, and 2.12.x before 2.12.3, 3.1.1 through 3.4.1. allows remote attackers to inject arbitrary web script or HTML via vectors related to the way error messages perform...

6.1CVSS6.5AI score0.01351EPSS
SaveExploits0References13Affected Software1
PyPA
PyPA
added 2026/07/09 4:49 p.m.15 views

Improper Restriction of XML External Entity Reference in trytond and proteus

An XXE issue was discovered in Tryton Application Platform Server 5.x through 5.0.45, 6.x through 6.0.15, and 6.1.x and 6.2.x through 6.2.5, and Tryton Application Platform Command Line Client proteus 5.x through 5.0.11, 6.x through 6.0.4, and 6.1.x and 6.2.x through 6.2.1. An authenticated user...

6.5CVSS6.7AI score0.01396EPSS
SaveExploits1References10Affected Software1
PyPA
PyPA
added 2026/07/09 4:49 p.m.15 views

Memory leak in Tensorflow

ImpactIf a graph node is invalid, TensorFlow can leak memory in the implementation of ImmutableExecutorState::Initialize:ccStatus s = params.createkerneln-properties, &item-;kernel;if !s.ok item-kernel = nullptr; s = AttachDefs, n; return s; Here, we set item-kernel to nullptr but it is a simple...

5.3CVSS6.2AI score0.00716EPSS
SaveExploits1References9Affected Software1
PyPA
PyPA
added 2026/07/09 4:49 p.m.15 views

`CHECK`-failures in `TensorByteSize` in Tensorflow

ImpactA malicious user can cause a denial of service by altering a SavedModel such that TensorByteSize would trigger CHECK failures.ccint64t TensorByteSizeconst TensorProto& t // numelements returns -1 if shape is not fully defined. int64t numelems = TensorShapet.tensorshape.numelements; return...

6.5CVSS6.7AI score0.00783EPSS
SaveExploits1References9Affected Software1
PyPA
PyPA
added 2026/07/09 4:49 p.m.15 views

Integer overflow in Tensorflow

ImpactThe implementation of OpLevelCostEstimator::CalculateTensorSize is vulnerable to an integer overflow if an attacker can create an operation which would involve a tensor with large enough number of elements:ccint64t OpLevelCostEstimator::CalculateTensorSize const OpInfo::TensorProperties&...

7.1CVSS6.7AI score0.00783EPSS
SaveExploits1References9Affected Software1
PyPA
PyPA
added 2026/07/09 4:49 p.m.15 views

Reachable Assertion in Tensorflow

ImpactWhen decoding a resource handle tensor from protobuf, a TensorFlow process can encounter cases where a CHECK assertion is invalidated based on user controlled arguments. This allows attackers to cause denial of services in TensorFlow processes. PatchesWe have patched the issue in GitHub...

7.1CVSS6.7AI score0.00469EPSS
SaveExploits0References8Affected Software1
PyPA
PyPA
added 2026/07/09 4:49 p.m.15 views

Memory exhaustion in Tensorflow

Impact The implementation of StringNGrams can be used to trigger a denial of service attack by causing an OOM condition after an integer overflow:pythonimport tensorflow as tftf.rawops.StringNGrams data='123456', datasplits=0,1, separator='a'15, ngramwidths=, leftpad='', rightpad='', padwidth=-5,...

6.5CVSS6.6AI score0.00821EPSS
SaveExploits1References9Affected Software1
PyPA
PyPA
added 2026/07/09 4:49 p.m.15 views

Undefined behavior in `SparseTensorSliceDataset`

Impact The implementation of SparseTensorSliceDataset has an undefined behavior: under certain condition it can be made to dereference a nullptr value:pythonimport tensorflow as tfimport numpy as nptf.rawops.SparseTensorSliceDataset indices=, values=, denseshape=1,1The 3 input arguments represent...

7.6CVSS6.6AI score0.00746EPSS
SaveExploits1References9Affected Software1
PyPA
PyPA
added 2026/07/09 4:49 p.m.15 views

Assertion failure based denial of service in Tensorflow

Impact The implementation of Bincount operations allows malicious users to cause denial of service by passing in arguments which would trigger a CHECK-fail:pythonimport tensorflow as tftf.rawops.DenseBincount input=0, 1, 2, size=1, weights=3,2,1, binaryoutput=FalseThere are several conditions tha...

7.1CVSS6.6AI score0.00783EPSS
SaveExploits1References9Affected Software1
PyPA
PyPA
added 2026/07/09 4:49 p.m.15 views

Null pointer dereference in Grappler's `IsConstant`

ImpactUnder certain scenarios, Grappler component of TensorFlow can trigger a null pointer dereference. There are 2 places where this can occur, for the same malicious alteration of a SavedModel file fixing the first one would trigger the same dereference in the second place:First, during constan...

6.5CVSS6.7AI score0.01097EPSS
SaveExploits1References11Affected Software1
PyPA
PyPA
added 2026/07/09 4:49 p.m.15 views

Segfault in `simplifyBroadcast` in Tensorflow

ImpactThe simplifyBroadcast function in the MLIR-TFRT infrastructure in TensorFlow is vulnerable to a segfault hence, denial of service, if called with scalar shapes.cc sizet maxRank = 0; for auto shape : llvm::enumerateshapes auto foundshape = analysis.dimensionsForShapeTensorshape.value; if...

8.2CVSS7AI score0.0087EPSS
SaveExploits1References9Affected Software1
PyPA
PyPA
added 2026/07/09 4:49 p.m.15 views

Out of bounds read in Tensorflow

ImpactThe TFG dialect of TensorFlow MLIR makes several assumptions about the incoming GraphDef before converting it to the MLIR-based dialect.If an attacker changes the SavedModel format on disk to invalidate these assumptions and the GraphDef is then converted to MLIR-based IR then they can caus...

8.8CVSS6.2AI score0.00142EPSS
SaveExploits0References6Affected Software1
PyPA
PyPA
added 2026/07/09 4:49 p.m.15 views

Reachable Assertion in Tensorflow

ImpactWhen decoding a tensor from protobuf, a TensorFlow process can encounter cases where a CHECK assertion is invalidated based on user controlled arguments, if the tensors have an invalid dtype and 0 elements or an invalid shape. This allows attackers to cause denial of services in TensorFlow...

7.1CVSS6.7AI score0.00469EPSS
SaveExploits0References8Affected Software1
PyPA
PyPA
added 2026/07/09 4:49 p.m.15 views

Crash when type cannot be specialized in Tensorflow

ImpactUnder certain scenarios, TensorFlow can fail to specialize a type during shape inference:ccvoid InferenceContext::PreInputInit const OpDef& opdef, const std::vector& inputtensors, const std::vector& inputtensorsasshapes const auto ret = fulltype::SpecializeTypeattrs, opdef;...

7.1CVSS6.7AI score0.00992EPSS
SaveExploits1References9Affected Software1
PyPA
PyPA
added 2026/07/09 4:49 p.m.15 views

Crash due to erroneous `StatusOr` in TensorFlow

ImpactA GraphDef from a TensorFlow SavedModel can be maliciously altered to cause a TensorFlow process to crash due to encountering a StatusOr value that is an error and forcibly extracting the value from it:cc if opregdata-typector != nullptr VLOG3 opdef; const FullTypeDef ctortypedef =...

7.5CVSS7AI score0.00973EPSS
SaveExploits1References9Affected Software1
PyPA
PyPA
added 2026/07/09 4:49 p.m.15 views

Out of bounds read in Tensorflow

ImpactThe TFG dialect of TensorFlow MLIR makes several assumptions about the incoming GraphDef before converting it to the MLIR-based dialect.If an attacker changes the SavedModel format on disk to invalidate these assumptions and the GraphDef is then converted to MLIR-based IR then they can caus...

8.8CVSS6.2AI score0.00142EPSS
SaveExploits0References6Affected Software1
PyPA
PyPA
added 2026/07/09 4:49 p.m.15 views

Stack overflow in TensorFlow

ImpactThe GraphDef format in TensorFlow does not allow self recursive functions. The runtime assumes that this invariant is satisfied. However, a GraphDef containing a fragment such as the following can be consumed when loading a SavedModel: library function signature name: "SomeOp" description:...

7.5CVSS7.1AI score0.00789EPSS
SaveExploits0References8Affected Software1
PyPA
PyPA
added 2026/07/09 4:49 p.m.15 views

Multiple `CHECK`-fails in `function.cc` in TensowFlow

ImpactA malicious user can cause a denial of service by altering a SavedModel such that assertions in function.cc would be falsified and crash the Python interpreter. PatchesWe have patched the issue in GitHub commits dcc21c7bc972b10b6fb95c2fb0f4ab5a59680ec2 and...

6.5CVSS6.7AI score0.008EPSS
SaveExploits1References10Affected Software1
PyPA
PyPA
added 2026/07/09 4:49 p.m.15 views

Out-of-bounds Write in OpenCV

An exploitable heap buffer overflow vulnerability exists in the data structure persistence functionality of OpenCV 4.1.0 corresponds with OpenCV-Python 4.1.0.25. A specially crafted XML file can cause a buffer overflow, resulting in multiple heap corruptions and potential code execution. An...

8.8CVSS7.2AI score0.20947EPSS
SaveExploits1References9Affected Software1
PyPA
PyPA
added 2026/07/09 4:49 p.m.15 views

`CHECK`-failures during Grappler's `IsSimplifiableReshape` in Tensorflow

ImpactThe Grappler optimizer in TensorFlow can be used to cause a denial of service by altering a SavedModel such that IsSimplifiableReshape would trigger CHECK failures. PatchesWe have patched the issue in GitHub commits ebc1a2ffe5a7573d905e99bd0ee3568ee07c12c1,...

6.5CVSS6.7AI score0.01151EPSS
SaveExploits1References11Affected Software1
Total number of security vulnerabilities5000