Tensorflow vulnerabilities
403 CVEs and advisories name Tensorflow as an affected vendor, newest first. Follow it as a feed.
- CVE-2021-41202Overflow/crash in `tf.range`
- CVE-2021-41209FPE in convolutions with zero size filters
- CVE-2021-41203Missing validation during checkpoint loading
- CVE-2021-41215Null pointer exception in `DeserializeSparse`
- CVE-2021-41217Null pointer exception when `Exit` node is not preceded by `Enter` op
- CVE-2021-41219Undefined behavior via `nullptr` reference binding in sparse matrix multiplication
- CVE-2021-41214Reference binding to `nullptr` in `tf.ragged.cross`
- CVE-2021-41204Segfault while copying constant resource tensor
- CVE-2021-41226Heap OOB read in `SparseBinCount`
- CVE-2021-41223Heap OOB read in `FusedBatchNorm` kernels
- CVE-2021-41224`SparseFillEmptyRows` heap OOB read
- CVE-2021-41212Heap OOB read in `tf.ragged.cross`
- CVE-2021-41211Heap OOB read in shape inference for `QuantizeV2`
- CVE-2021-41205Heap OOB read in all `tf.raw_ops.QuantizeAndDequantizeV*` ops
- CVE-2021-41210Heap OOB read in `tf.raw_ops.SparseCountSparseOutput`
- CVE-2021-41201Unitialized access in `EinsumHelper::ParseEquation`
- CVE-2021-41200Incomplete validation in `tf.summary.create_file_writer`
- CVE-2021-41197Crashes due to overflow and `CHECK`-fail in ops with large tensor shapes
- CVE-2021-41198Overflow/crash in `tf.tile` when tiling tensor is large
- CVE-2021-41199Overflow/crash in `tf.image.resize` when size is large
- CVE-2021-41196Crash in `max_pool3d` when size argument is 0 or negative
- CVE-2021-41195Crash in `tf.math.segment_*` operations
- CVE-2021-37690Use after free and segfault in shape inference functions in TensorFlow
- CVE-2021-37678Arbitrary code execution due to YAML deserialization
- CVE-2021-37692Segfault on strings tensors with mistmatched dimensions in TensorFlow
- CVE-2021-37669Crash in NMS ops caused by integer conversion to unsigned in TensorFlow
- CVE-2021-37673`CHECK`-fail in `MapStage` in TensorFlow
- CVE-2021-37663Incomplete validation in `QuantizeV2` in TensorFlow
- CVE-2021-37682Use of unitialized value in TensorFlow Lite
- CVE-2021-37674Incomplete validation in `MaxPoolGrad` in TensorFlow