Latest CVE Feed
-
5.5
MEDIUMCVE-2021-29547
TensorFlow is an end-to-end open source platform for machine learning. An attacker can cause a segfault and denial of service via accessing data outside of bounds in `tf.raw_ops.QuantizedBatchNormWithGlobalNormalization`. This is because the implementatio... Read more
Affected Products : tensorflow- EPSS Score: %0.02
- Published: May. 14, 2021
- Modified: Nov. 21, 2024
-
7.8
HIGHCVE-2021-29546
TensorFlow is an end-to-end open source platform for machine learning. An attacker can trigger an integer division by zero undefined behavior in `tf.raw_ops.QuantizedBiasAdd`. This is because the implementation of the Eigen kernel(https://github.com/tenso... Read more
Affected Products : tensorflow- EPSS Score: %0.02
- Published: May. 14, 2021
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2021-29545
TensorFlow is an end-to-end open source platform for machine learning. An attacker can trigger a denial of service via a `CHECK`-fail in converting sparse tensors to CSR Sparse matrices. This is because the implementation(https://github.com/tensorflow/ten... Read more
Affected Products : tensorflow- EPSS Score: %0.02
- Published: May. 14, 2021
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2021-29544
TensorFlow is an end-to-end open source platform for machine learning. An attacker can trigger a denial of service via a `CHECK`-fail in `tf.raw_ops.QuantizeAndDequantizeV4Grad`. This is because the implementation does not validate the rank of the `input_... Read more
Affected Products : tensorflow- EPSS Score: %0.07
- Published: May. 14, 2021
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2021-29543
TensorFlow is an end-to-end open source platform for machine learning. An attacker can trigger a denial of service via a `CHECK`-fail in `tf.raw_ops.CTCGreedyDecoder`. This is because the implementation(https://github.com/tensorflow/tensorflow/blob/161544... Read more
Affected Products : tensorflow- EPSS Score: %0.02
- Published: May. 14, 2021
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2021-29542
TensorFlow is an end-to-end open source platform for machine learning. An attacker can cause a heap buffer overflow by passing crafted inputs to `tf.raw_ops.StringNGrams`. This is because the implementation(https://github.com/tensorflow/tensorflow/blob/1c... Read more
Affected Products : tensorflow- EPSS Score: %0.02
- Published: May. 14, 2021
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2021-29541
TensorFlow is an end-to-end open source platform for machine learning. An attacker can trigger a dereference of a null pointer in `tf.raw_ops.StringNGrams`. This is because the implementation(https://github.com/tensorflow/tensorflow/blob/1cdd4da14282210cc... Read more
Affected Products : tensorflow- EPSS Score: %0.02
- Published: May. 14, 2021
- Modified: Nov. 21, 2024
-
7.8
HIGHCVE-2021-29540
TensorFlow is an end-to-end open source platform for machine learning. An attacker can cause a heap buffer overflow to occur in `Conv2DBackpropFilter`. This is because the implementation(https://github.com/tensorflow/tensorflow/blob/1b0296c3b8dd9bd948f924... Read more
Affected Products : tensorflow- EPSS Score: %0.02
- Published: May. 14, 2021
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2021-29539
TensorFlow is an end-to-end open source platform for machine learning. Calling `tf.raw_ops.ImmutableConst`(https://www.tensorflow.org/api_docs/python/tf/raw_ops/ImmutableConst) with a `dtype` of `tf.resource` or `tf.variant` results in a segfault in the i... Read more
Affected Products : tensorflow- EPSS Score: %0.02
- Published: May. 14, 2021
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2021-29538
TensorFlow is an end-to-end open source platform for machine learning. An attacker can cause a division by zero to occur in `Conv2DBackpropFilter`. This is because the implementation(https://github.com/tensorflow/tensorflow/blob/1b0296c3b8dd9bd948f924aa8c... Read more
Affected Products : tensorflow- EPSS Score: %0.02
- Published: May. 14, 2021
- Modified: Nov. 21, 2024
-
7.8
HIGHCVE-2021-29537
TensorFlow is an end-to-end open source platform for machine learning. An attacker can cause a heap buffer overflow in `QuantizedResizeBilinear` by passing in invalid thresholds for the quantization. This is because the implementation(https://github.com/t... Read more
Affected Products : tensorflow- EPSS Score: %0.02
- Published: May. 14, 2021
- Modified: Nov. 21, 2024
-
7.8
HIGHCVE-2021-29536
TensorFlow is an end-to-end open source platform for machine learning. An attacker can cause a heap buffer overflow in `QuantizedReshape` by passing in invalid thresholds for the quantization. This is because the implementation(https://github.com/tensorfl... Read more
Affected Products : tensorflow- EPSS Score: %0.02
- Published: May. 14, 2021
- Modified: Nov. 21, 2024
-
7.8
HIGHCVE-2021-29535
TensorFlow is an end-to-end open source platform for machine learning. An attacker can cause a heap buffer overflow in `QuantizedMul` by passing in invalid thresholds for the quantization. This is because the implementation(https://github.com/tensorflow/t... Read more
Affected Products : tensorflow- EPSS Score: %0.02
- Published: May. 14, 2021
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2021-29534
TensorFlow is an end-to-end open source platform for machine learning. An attacker can trigger a denial of service via a `CHECK`-fail in `tf.raw_ops.SparseConcat`. This is because the implementation(https://github.com/tensorflow/tensorflow/blob/b432a38fe0... Read more
Affected Products : tensorflow- EPSS Score: %0.02
- Published: May. 14, 2021
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2021-29533
TensorFlow is an end-to-end open source platform for machine learning. An attacker can trigger a denial of service via a `CHECK` failure by passing an empty image to `tf.raw_ops.DrawBoundingBoxes`. This is because the implementation(https://github.com/ten... Read more
Affected Products : tensorflow- EPSS Score: %0.02
- Published: May. 14, 2021
- Modified: Nov. 21, 2024
-
7.1
HIGHCVE-2021-29532
TensorFlow is an end-to-end open source platform for machine learning. An attacker can force accesses outside the bounds of heap allocated arrays by passing in invalid tensor values to `tf.raw_ops.RaggedCross`. This is because the implementation(https://g... Read more
Affected Products : tensorflow- EPSS Score: %0.02
- Published: May. 14, 2021
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2021-29531
TensorFlow is an end-to-end open source platform for machine learning. An attacker can trigger a `CHECK` fail in PNG encoding by providing an empty input tensor as the pixel data. This is because the implementation(https://github.com/tensorflow/tensorflow... Read more
Affected Products : tensorflow- EPSS Score: %0.02
- Published: May. 14, 2021
- Modified: Nov. 21, 2024
-
7.8
HIGHCVE-2021-29530
TensorFlow is an end-to-end open source platform for machine learning. An attacker can trigger a null pointer dereference by providing an invalid `permutation` to `tf.raw_ops.SparseMatrixSparseCholesky`. This is because the implementation(https://github.c... Read more
Affected Products : tensorflow- EPSS Score: %0.02
- Published: May. 14, 2021
- Modified: Nov. 21, 2024
-
7.8
HIGHCVE-2021-29529
TensorFlow is an end-to-end open source platform for machine learning. An attacker can trigger a heap buffer overflow in `tf.raw_ops.QuantizedResizeBilinear` by manipulating input values so that float rounding results in off-by-one error in accessing imag... Read more
Affected Products : tensorflow- EPSS Score: %0.05
- Published: May. 14, 2021
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2021-29528
TensorFlow is an end-to-end open source platform for machine learning. An attacker can trigger a division by 0 in `tf.raw_ops.QuantizedMul`. This is because the implementation(https://github.com/tensorflow/tensorflow/blob/55900e961ed4a23b438392024912154a2... Read more
Affected Products : tensorflow- EPSS Score: %0.02
- Published: May. 14, 2021
- Modified: Nov. 21, 2024