Lucene search
Veracode Vulnerability DatabaseVERACODE:34062HistoryFeb 08, 2022 - 8:50 a.m.
Integer Overflow
2022-02-0808:50:10
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
3
0.005 Low
EPSS
Percentile
76.5%
Tensorflow is vulnerable to integer overflows. The vulnerability exists due to a lack of input sanitization in the TfLiteIntArrayGetSizeInBytes function of the common.c file doesn’t control inputs which allows an attacker to craft a TFLite model causing an application crash.
References
github.com/tensorflow/tensorflow/blob/ca6f96b62ad84207fbec580404eaa7dd7403a550/tensorflow/lite/c/common.c#L24-L33
github.com/tensorflow/tensorflow/blob/ca6f96b62ad84207fbec580404eaa7dd7403a550/tensorflow/lite/c/common.c#L53-L60
github.com/tensorflow/tensorflow/commit/a1e1511dde36b3f8aa27a6ec630838e7ea40e091
github.com/tensorflow/tensorflow/security/advisories/GHSA-9gwq-6cwj-47h3
Related
prion
prion
Integer overflow
2022-02-04 23:15:00
nvd
nvd
CVE-2022-23558
2022-02-04 23:15:13
cve
cve
CVE-2022-23558
2022-02-04 23:15:13
osv
osv
BIT-tensorflow-2022-23558
2024-03-06 11:15:30
PYSEC-2022-67
2022-02-04 23:15:00
PYSEC-2022-122
2022-02-04 23:15:00
cnvd
cnvd
Google Tensorflow Input Validation Error Vulnerability (CNVD-2022-09878)
2022-02-09 00:00:00
cvelist
cvelist
CVE-2022-23558 Integer overflow in TFLite array creation
2022-02-04 22:32:43
github
github
Integer overflow in TFLite array creation
2022-02-09 23:52:24
