Tensorflow vulnerabilities
403 CVEs and advisories name Tensorflow as an affected vendor, newest first. Follow it as a feed.
- CVE-2022-41901`CHECK_EQ` fail via input in `SparseMatrixNNZ` in Tensorflow
- CVE-2022-41900FractionalMaxPool and FractionalAVGPool heap out-of-bounds acess in Tensorflow
- CVE-2022-41899`CHECK` fail via inputs in `SdcaOptimizer` in Tensorflow
- CVE-2022-41898`CHECK` fail via inputs in `SparseFillEmptyRowsGrad` in Tensorflow
- CVE-2022-41897`FractionalMaxPoolGrad` Heap out of bounds read in Tensorflow
- CVE-2022-41896`tf.raw_ops.Mfcc` crashes in Tensorflow
- CVE-2022-41895`MirrorPadGrad` heap out of bounds read in Tensorflow
- CVE-2022-41894Buffer overflow in `CONV_3D_TRANSPOSE` on TFLite
- CVE-2022-41893`CHECK_EQ` fail in `tf.raw_ops.TensorListResize` in Tensorflow
- CVE-2022-41891Segfault in `tf.raw_ops.TensorListConcat` in Tensorflow
- CVE-2022-41890`CHECK` fail in `BCast` overflow in Tensorflow
- CVE-2022-41889Segfault via invalid attributes in `pywrap_tfe_src.cc` in Tensorflow
- CVE-2022-41888Unckecked rank size in `tf.image.generate_bounding_box_proposals` in Tensorflow
- CVE-2022-41887Overflow in `tf.keras.losses.poisson` in Tensorflow
- CVE-2022-41886Overflow in `ImageProjectiveTransformV2` in Tensorflow
- CVE-2022-41885Overflow in `FusedResizeAndPadConv2D` in Tensorflow
- CVE-2022-41884Seg fault in `ndarray_tensor_bridge` due to zero and large inputs in Tensorflow
- CVE-2022-41883Out of bounds segmentation fault due to unequal op inputs in Tensorflow
- CVE-2022-41880ThreadUnsafeUnigramCandidateSampler Heap out of bounds in Tensorflow
- CVE-2022-36015Integer overflow in math ops in TensorFlow
- CVE-2022-36012Assertion fail on MLIR empty edge names in TensorFlow
- CVE-2022-35996Floating point exception in `Conv2D` in TensorFlow
- CVE-2022-36027Segfault TFLite converter on per-channel quantized transposed convolutions in TensorFlow
- CVE-2022-36017Segfault in `Requantize` in TensorFlow
- CVE-2022-36014Null-dereference in `mlir::tfg::TFOp::nameAttr` in TensorFlow
- CVE-2022-36000Null dereference on MLIR on empty function attributes in TensorFlow
- CVE-2022-36011Null dereference on MLIR on empty function attributes in TensorFlow
- CVE-2022-36013Null-dereference in `mlir::tfg::GraphDefImporter::ConvertNodeDef` in TensorFlow
- CVE-2022-35994`CHECK` fail in `CollectiveGather` in TensorFlow
- CVE-2022-35993`CHECK` fail in `SetSize` in TensorFlow