Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:32849
HistoryNov 09, 2021 - 7:35 a.m.

Arbitrary Memory Read

2021-11-0907:35:21
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
11
tensorflow vulnerability tstring immutableconst arbitrary memory information disclosure

EPSS

0.001

Percentile

29.1%

tensorflow is vulnerable to Arbitrary Memory Read. The vulnerability exists because the tstring class has a special case for memory mapped strings and the ImmutableConst operation does not offer any support for this datatype, allowing an attacker to read the arbitrary memory and it’s leads to information disclosure.

EPSS

0.001

Percentile

29.1%