Tensorflow vulnerabilities
403 CVEs and advisories name Tensorflow as an affected vendor, newest first. Follow it as a feed.
- CVE-2022-23579`CHECK`-failures during Grappler's `SafeToRemoveIdentity` in Tensorflow
- CVE-2022-23580Abort caused by allocating a vector that is too large in Tensorflow
- CVE-2022-23581`CHECK`-failures during Grappler's `IsSimplifiableReshape` in Tensorflow
- CVE-2022-23575Integer overflow in Tensorflow
- CVE-2022-23576Integer overflow in Tensorflow
- CVE-2022-23588`CHECK`-fails due to attempting to build a reference tensor in Tensorflow
- CVE-2022-23589Null pointer dereference in Grappler's `IsConstant` in Tensorflow
- CVE-2022-23586Multiple `CHECK`-fails in `function.cc` in Tensorflow
- CVE-2022-23583`CHECK`-failures in binary ops in Tensorflow
- CVE-2022-23582`CHECK`-failures in `TensorByteSize` in Tensorflow
- CVE-2022-23584Use after free in `DecodePng` in Tensorflow
- CVE-2022-23592Out of bounds read in Tensorflow
- CVE-2022-23587Integer overflow in Tensorflow
- CVE-2022-23595Null pointer dereference in TensorFlow
- CVE-2022-23594Out of bounds read in Tensorflow
- CVE-2022-23590Crash due to erroneous `StatusOr` in Tensorflow
- CVE-2022-23591Stack overflow in Tensorflow
- CVE-2022-23593Segfault in `simplifyBroadcast` in Tensorflow
- CVE-2021-41227Arbitrary memory read in `ImmutableConst`
- CVE-2021-41225A use of uninitialized value vulnerability in Tensorflow
- CVE-2021-41222Segfault due to negative splits in `SplitV`
- CVE-2021-41228Code injection in `saved_model_cli`
- CVE-2021-41220Use after free in `CollectiveReduceV2`
- CVE-2021-41221Access to invalid memory during shape inference in `Cudnn*` ops
- CVE-2021-41216Heap buffer overflow in `Transpose`
- CVE-2021-41213Deadlock in mutually recursive `tf.function` objects
- CVE-2021-41218Integer division by 0 in `tf.raw_ops.AllToAll`
- CVE-2021-41206Incomplete validation of shapes in multiple TF ops
- CVE-2021-41208Incomplete validation in boosted trees code
- CVE-2021-41207Division by zero in `ParallelConcat`