Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:27268
HistorySep 28, 2020 - 7:01 a.m.

Arbitrary Code Execution

2020-09-2807:01:26
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
15
tensorflow
buffer overflow
arbitrary code execution
software vulnerability

EPSS

0.005

Percentile

75.3%

tensorflow is vulnerable to arbitrary code execution. An heap-based buffer overflow in the implementation of SparseFillEmptyRowsGrad allows an attacker to execute arbitrary code on the host OS since it is possible for reverse_index_map(i) to be an index outside of bounds of grad_values.

EPSS

0.005

Percentile

75.3%