Svi - CERT CVE

ID CVSS Sažetak Zadnje ažurirano Objavljeno
CVE-2021-37647 2.1 TensorFlow is an end-to-end open source platform for machine learning. When a user does not supply arguments that determine a valid sparse tensor, `tf.raw_ops.SparseTensorSliceDataset` implementation can be made to dereference a null pointer. The [im 2021-08-18 16:25:00
CVE-2021-37643 3.6 TensorFlow is an end-to-end open source platform for machine learning. If a user does not provide a valid padding value to `tf.raw_ops.MatrixDiagPartOp`, then the code triggers a null pointer dereference (if input is empty) or produces invalid behavi 2021-08-18 15:45:00
CVE-2021-37646 2.1 TensorFlow is an end-to-end open source platform for machine learning. In affected versions the implementation of `tf.raw_ops.StringNGrams` is vulnerable to an integer overflow issue caused by converting a signed integer value to an unsigned one and 2021-08-18 15:39:00
CVE-2021-37645 2.1 TensorFlow is an end-to-end open source platform for machine learning. In affected versions the implementation of `tf.raw_ops.QuantizeAndDequantizeV4Grad` is vulnerable to an integer overflow issue caused by converting a signed integer value to an un 2021-08-18 15:38:00
CVE-2021-37644 2.1 TensorFlow is an end-to-end open source platform for machine learning. In affected versions providing a negative element to `num_elements` list argument of `tf.raw_ops.TensorListReserve` causes the runtime to abort the process due to reallocating a ` 2021-08-18 15:38:00
CVE-2021-37650 4.6 TensorFlow is an end-to-end open source platform for machine learning. In affected versions the implementation for `tf.raw_ops.ExperimentalDatasetToTFRecord` and `tf.raw_ops.DatasetToTFRecord` can trigger heap buffer overflow and segmentation fault. 2021-08-18 15:34:00
CVE-2021-37651 4.6 TensorFlow is an end-to-end open source platform for machine learning. In affected versions the implementation for `tf.raw_ops.FractionalAvgPoolGrad` can be tricked into accessing data outside of bounds of heap allocated buffers. The [implementation] 2021-08-18 14:46:00
CVE-2021-33708 6.5 Due to insufficient input validation in Kyma, authenticated users can pass a Header of their choice and escalate privileges. 2021-08-18 14:35:00
CVE-2021-37654 3.6 TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can trigger a crash via a `CHECK`-fail in debug builds of TensorFlow using `tf.raw_ops.ResourceGather` or a read from outside the bounds of heap a 2021-08-18 14:30:00
CVE-2021-37655 4.6 TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can trigger a read from outside of bounds of heap allocated data by sending invalid arguments to `tf.raw_ops.ResourceScatterUpdate`. The [implemen 2021-08-18 14:27:00
ID CVSS Sažetak Zadnje ažurirano Objavljeno
Stranica
/39823
Zapisa po stranici: