Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:40008
HistoryMar 31, 2023 - 5:59 a.m.

Double Free

2023-03-3105:59:04
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
19
tensorflow
double free
attack
vulnerability
nn_ops
fractional_avg_pool_v2
fractional_max_pool_v2
denial of service
execution flow

EPSS

0

Percentile

9.0%

tensorflow is vulnerable to a Double Free attack. The vulnerability occurs when when the first and the fourth elements of the pooling_ratio function has parameters not equal to 1.0 in nn_ops.fractional_avg_pool_v2 and nn_ops.fractional_max_pool_v2 because pooling on batch and channel dimensions is not supported. An attacker can cause a Denial of Service or possibly alter the execution flow.

EPSS

0

Percentile

9.0%