Out-of-Bounds Read

2021-05-1714:09:47

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.0005 Low

EPSS

Percentile

17.8%

JSON

tensorflow has out-of-bound read. The vulnerability exists due to the lack of validation of axis allowing an attacker to be able to read data from outside of the bounds of heap allocated in the buffer in tf.raw_ops.QuantizeAndDequantizeV3.

CPENameOperatorVersion
tensorflow-gpule2.3.2
tensorflow-gpule2.2.2
tensorflow-gpule2.4.1
tensorflow-gpule2.5.0rc3
tensorflow-gpule2.1.3
tensorflow-cpule2.3.2
tensorflow-cpule2.2.2
tensorflow-cpule2.4.1
tensorflow-cpule2.5.0rc3
tensorflow-cpule2.1.3

Name	Operator	Version
tensorflow-gpu	le	2.3.2
tensorflow-gpu	le	2.2.2
tensorflow-gpu	le	2.4.1
tensorflow-gpu	le	2.5.0rc3
tensorflow-gpu	le	2.1.3
tensorflow-cpu	le	2.3.2
tensorflow-cpu	le	2.2.2
tensorflow-cpu	le	2.4.1
tensorflow-cpu	le	2.5.0rc3
tensorflow-cpu	le	2.1.3