Advisoriesby Ibis
TensorFlow security advisories
433 advisories · none critical or high in 12 months · latest Jul 30, 2024
60 of 433 advisories
TensorFlow has segfault in array_ops.upper_boundCVE-2023-33976fixed in 2.12.1TensorFlow Denial of Service vulnerabilityCVE-2023-25661fixed in 2.11.1TensorFlow vulnerable to Out-of-Bounds Read in DynamicStitchCVE-2023-25659fixed in 2.11.1TensorFlow vulnerable to seg fault in `tf.raw_ops.Print`CVE-2023-25660fixed in 2.11.1TensorFlow vulnerable to integer overflow in EditDistanceCVE-2023-25662fixed in 2.11.1TensorFlow has Null Pointer Error in TensorArrayConcatV2CVE-2023-25663fixed in 2.11.1TensorFlow has Heap-buffer-overflow in AvgPoolGradCVE-2023-25664fixed in 2.11.1TensorFlow has Null Pointer Error in SparseSparseMaximumCVE-2023-25665fixed in 2.11.1TensorFlow has Floating Point Exception in AudioSpectrogramCVE-2023-25666fixed in 2.11.1TensorFlow vulnerable to segfault when opening multiframe gifCVE-2023-25667fixed in 2.11.1TensorFlow has a heap out-of-buffer read vulnerability in the QuantizeAndDequantize operationCVE-2023-25668fixed in 2.11.1TensorFlow has Floating Point Exception in AvgPoolGrad with XLACVE-2023-25669fixed in 2.11.1TensorFlow has Null Pointer Error in QuantizedMatMulWithBiasAndDequantizeCVE-2023-25670fixed in 2.11.1TensorFlow has segmentation fault in tfg-translateCVE-2023-25671fixed in 2.11.1TensorFlow has Null Pointer Error in LookupTableImportV2CVE-2023-25672fixed in 2.11.1TensorFlow has Floating Point Exception in TensorListSplit with XLACVE-2023-25673fixed in 2.11.1TensorFlow has Null Pointer Error in RandomShuffle with XLA enableCVE-2023-25674fixed in 2.11.1TensorFlow has Segfault in Bincount with XLACVE-2023-25675fixed in 2.11.1TensorFlow has null dereference on ParallelConcat with XLACVE-2023-25676fixed in 2.11.1TensorFlow has double free in Fractional(Max/Avg)PoolCVE-2023-25801fixed in 2.11.1TensorFlow has Floating Point Exception in TFLite in conv kernelCVE-2023-27579fixed in 2.11.1TensorFlow vulnerable to Out-of-Bounds Read in GRUBlockCellGradCVE-2023-25658fixed in 2.11.1Tensorflow vulnerable to Out-of-Bounds ReadCVE-2022-41880fixed in 2.8.4 +2`CHECK` failure in `SobolSample` via missing validationGHSA-cqvq-fvhr-v6hcfixed in 2.8.4 +2`CHECK` fail in `TensorListScatter` and `TensorListScatterV2` in eager modeGHSA-xf83-q765-xm6mfixed in 2.8.4 +2Invalid char to bool conversion when printing a tensorCVE-2022-41911fixed in 2.8.4 +2Heap overflow in `QuantizeAndDequantizeV2`CVE-2022-41910fixed in 2.8.4 +2Segfault in `CompositeTensorVariantToComponents`CVE-2022-41909fixed in 2.8.4 +2`CHECK` fail via inputs in `PyFunc`CVE-2022-41908fixed in 2.8.4 +2Overflow in `ResizeNearestNeighborGrad`CVE-2022-41907fixed in 2.8.4 +2Out of bounds write in grappler in TensorflowCVE-2022-41902fixed in 2.8.4 +2`CHECK_EQ` fail via input in `SparseMatrixNNZ`CVE-2022-41901fixed in 2.8.4 +2FractionalMaxPool and FractionalAVGPool heap out-of-bounds acessCVE-2022-41900fixed in 2.8.4 +2`CHECK` fail via inputs in `SdcaOptimizer`CVE-2022-41899fixed in 2.8.4 +2`CHECK` fail via inputs in `SparseFillEmptyRowsGrad`CVE-2022-41898fixed in 2.8.4 +2`FractionalMaxPoolGrad` Heap out of bounds readCVE-2022-41897fixed in 2.8.4 +2`tf.raw_ops.Mfcc` crashesCVE-2022-41896fixed in 2.8.4 +2`MirrorPadGrad` heap out of bounds readCVE-2022-41895fixed in 2.8.4 +2Buffer overflow in `CONV_3D_TRANSPOSE` on TFLiteCVE-2022-41894fixed in 2.8.4 +2`CHECK_EQ` fail in `tf.raw_ops.TensorListResize`CVE-2022-41893fixed in 2.8.4 +2Segfault in `tf.raw_ops.TensorListConcat`CVE-2022-41891fixed in 2.8.4 +2`CHECK` fail in `BCast` overflowCVE-2022-41890fixed in 2.8.4 +2Segfault via invalid attributes in `pywrap_tfe_src.cc`CVE-2022-41889fixed in 2.8.4 +2FPE in `tf.image.generate_bounding_box_proposals`CVE-2022-41888fixed in 2.8.4 +2Overflow in `tf.keras.losses.poisson`CVE-2022-41887fixed in 2.9.3 +1Overflow in `ImageProjectiveTransformV2`CVE-2022-41886fixed in 2.8.4 +2Overflow in `FusedResizeAndPadConv2D`CVE-2022-41885fixed in 2.7.4 +2Seg fault in `ndarray_tensor_bridge` due to zero and large inputsCVE-2022-41884fixed in 2.8.4 +2Out of bounds segmentation fault due to unequal op inputs in TensorflowCVE-2022-41883fixed in 2.10.1TensorFlow vulnerable to heap out of bounds read in filesystem glob matchingCVE-2020-26269fixed in 2.4.0TensorFlow vulnerable to `CHECK` fail in `Save` and `SaveSlices`CVE-2022-35983fixed in 2.7.2 +2TensorFlow vulnerable to `CHECK` fail in `ParameterizedTruncatedNormal`CVE-2022-35984fixed in 2.7.2 +2TensorFlow vulnerable to `CHECK` fail in `LRNGrad`CVE-2022-35985fixed in 2.7.2 +2TensorFlow vulnerable to segfault in `RaggedBincount`CVE-2022-35986fixed in 2.7.2 +2TensorFlow vulnerable to `CHECK` fail in `tf.linalg.matrix_rank`CVE-2022-35988fixed in 2.7.2 +2TensorFlow vulnerable to `CHECK` fail in `MaxPool`CVE-2022-35989fixed in 2.7.2 +2TensorFlow vulnerable to segfault in `SparseBincount`CVE-2022-35982fixed in 2.7.2 +2TensorFlow vulnerable to `CHECK` fail in `FractionalMaxPoolGrad`CVE-2022-35981fixed in 2.7.2 +2TensorFlow vulnerable to segfault in `QuantizedRelu` and `QuantizedRelu6`CVE-2022-35979fixed in 2.7.2 +2TensorFlow vulnerable to segfault in `QuantizeDownAndShrinkRange`CVE-2022-35974fixed in 2.7.2 +2About TensorFlow
The end-to-end machine learning platform.
Packages watched: tensorflow (PyPI).
Google elsewhere on Ibis: Acquisitions · Paydays · Repos · TechConf · Trending