CVE-2019-16778

CVE-2019-16778 : In TensorFlow before 1.15, a heap-based buffer overflow can occur in UnsortedSegmentSum when the Index template argument is int32. Data_size and num_segments are truncated from int64 to int32, potentially producing negative numbers and out-of-bounds memory access. The issue is de...

CVE-2018-7575

CVE-2018-7575 affects Google TensorFlow 1.7.x and earlier. Connected sources describe a buffer/integer overflow in parsing a malicious meta checkpoint: the block size in a meta file may contain a large int64 value, causing an overflow when added and potentially leading to an out-of-bounds read in...

CVE-2018-7577

CVE-2018-7577 affects the Snappy library (1.1.4) as used by Google TensorFlow prior to 1.7.1. The vulnerability stems from memcpy parameter overlap, which can cause a crash or allow reading from other parts of process memory. Exploitation details are not provided in the documents. Practical impac...

CVE-2018-8825

CVE-2018-8825 affects Google TensorFlow 1.7 and earlier, with a buffer overflow that can lead to local code execution. Multiple connected advisories corroborate a buffer‑overflow issue related to TensorFlow components (e.g., TOCO handling of TFLite graphs in the same family). The provided documen...

CVE-2018-7576

CVE-2018-7576 relates to Google TensorFlow, affecting 1.6.x and earlier due to a null pointer dereference. The available descriptions indicate the exploitation is context‑dependent. The connected documents corroborate the TensorFlow association but do not provide concrete remediation details (pat...

CVE-2019-9635

CVE-2019-9635 : A NULL pointer dereference in Google TensorFlow (pre-1.12.2) can cause a denial of service via an invalid GIF file. Affected: TensorFlow versions before 1.12.2. Root cause: NULL pointer dereference in GIF handling. Impact: DoS. Mitigation: upgrade to TensorFlow 1.12.2 or later (as...

CVE-2018-10055

CVE-2018-10055 affects the TensorFlow XLA compiler in Google TensorFlow prior to 1.7.1. The issue is an invalid memory access and/or a heap buffer overflow triggered by a crafted configuration file, which could cause a crash or allow reading from other parts of process memory. Connected documents...