Browse CVEs

HIGH 7.5 CVE-2022-35992 TensorFlow is an open source platform for machine learning. When `TensorListFromTensor` receives an `element_shape` of a rank greater than one, it gi… Tensorflow 2.7.2 / 2.8.1+ Fix from $1,9502022-09-16 HIGH 7.5 CVE-2022-35993 TensorFlow is an open source platform for machine learning. When `SetSize` receives an input `set_shape` that is not a 1D tensor, it gives a `CHECK` … Tensorflow 2.7.2 / 2.8.1+ Fix from $1,9502022-09-16 HIGH 7.5 CVE-2022-35994 TensorFlow is an open source platform for machine learning. When `CollectiveGather` receives an scalar input `input`, it gives a `CHECK` fails that c… Tensorflow 2.7.2 / 2.8.1+ Fix from $1,9502022-09-16 HIGH 7.5 CVE-2022-35995 TensorFlow is an open source platform for machine learning. When `AudioSummaryV2` receives an input `sample_rate` with more than one element, it give… Tensorflow 2.7.2 / 2.8.1+ Fix from $1,9502022-09-16 HIGH 7.5 CVE-2022-35997 TensorFlow is an open source platform for machine learning. If `tf.sparse.cross` receives an input `separator` that is not a scalar, it gives a `CHEC… Tensorflow 2.7.2 / 2.8.1+ Fix from $1,9502022-09-16 HIGH 7.5 CVE-2022-35998 TensorFlow is an open source platform for machine learning. If `EmptyTensorList` receives an input `element_shape` with more than one dimension, it g… Tensorflow 2.7.2 / 2.8.1+ Fix from $1,9502022-09-16 HIGH 7.5 CVE-2022-35999 TensorFlow is an open source platform for machine learning. When `Conv2DBackpropInput` receives empty `out_backprop` inputs (e.g. `[3, 1, 0, 1]`), th… Tensorflow 2.7.2 / 2.8.1+ Fix from $1,9502022-09-16 HIGH 7.5 CVE-2022-36001 TensorFlow is an open source platform for machine learning. When `DrawBoundingBoxes` receives an input `boxes` that is not of dtype `float`, it gives… Tensorflow 2.7.2 / 2.8.1+ Fix from $1,9502022-09-16 HIGH 7.5 CVE-2022-36002 TensorFlow is an open source platform for machine learning. When `Unbatch` receives a nonscalar input `id`, it gives a `CHECK` fail that can trigger … Tensorflow 2.7.2 / 2.8.1+ Fix from $1,9502022-09-16 HIGH 7.5 CVE-2022-36003 TensorFlow is an open source platform for machine learning. When `RandomPoissonV2` receives large input shape and rates, it gives a `CHECK` fail that… Tensorflow 2.7.2 / 2.8.1+ Fix from $1,9502022-09-16 HIGH 7.5 CVE-2022-36004 TensorFlow is an open source platform for machine learning. When `tf.random.gamma` receives large input shape and rates, it gives a `CHECK` fail that… Tensorflow 2.7.2 / 2.8.1+ Fix from $1,9502022-09-16 HIGH 7.5 CVE-2022-36005 TensorFlow is an open source platform for machine learning. When `tf.quantization.fake_quant_with_min_max_vars_gradient` receives input `min` or `max… Tensorflow 2.7.2 / 2.8.1+ Fix from $1,9502022-09-16 MEDIUM 5.5 CVE-2022-40755 JasPer 3.0.6 allows denial of service via a reachable assertion in the function inttobits in libjasper/base/jas_image.c. Jasper No fix yet Fix from $1,6002022-09-16 HIGH 7.5 CVE-2022-35981 TensorFlow is an open source platform for machine learning. `FractionalMaxPoolGrad` validates its inputs with `CHECK` failures instead of with return… Tensorflow 2.7.2 / 2.8.1+ Fix from $1,9502022-09-16 HIGH 7.5 CVE-2022-35983 TensorFlow is an open source platform for machine learning. If `Save` or `SaveSlices` is run over tensors of an unsupported `dtype`, it results in a … Tensorflow 2.7.2 / 2.8.1+ Fix from $1,9502022-09-16 HIGH 7.5 CVE-2022-35984 TensorFlow is an open source platform for machine learning. `ParameterizedTruncatedNormal` assumes `shape` is of type `int32`. A valid `shape` of typ… Tensorflow 2.7.2 / 2.8.1+ Fix from $1,9502022-09-16 HIGH 7.5 CVE-2022-35985 TensorFlow is an open source platform for machine learning. If `LRNGrad` is given an `output_image` input tensor that is not 4-D, it results in a `CH… Tensorflow 2.7.2 / 2.8.1+ Fix from $1,9502022-09-16 HIGH 7.5 CVE-2022-35987 TensorFlow is an open source platform for machine learning. `DenseBincount` assumes its input tensor `weights` to either have the same shape as its i… Tensorflow 2.7.2 / 2.8.1+ Fix from $1,9502022-09-16 HIGH 7.5 CVE-2022-35988 TensorFlow is an open source platform for machine learning. When `tf.linalg.matrix_rank` receives an empty input `a`, the GPU kernel gives a `CHECK` … Tensorflow 2.7.2 / 2.8.1+ Fix from $1,9502022-09-16 HIGH 7.5 CVE-2022-35989 TensorFlow is an open source platform for machine learning. When `MaxPool` receives a window size input array `ksize` with dimensions greater than it… Tensorflow 2.7.2 / 2.8.1+ Fix from $1,9502022-09-16 HIGH 7.5 CVE-2022-35990 TensorFlow is an open source platform for machine learning. When `tf.quantization.fake_quant_with_min_max_vars_per_channel_gradient` receives input `… Tensorflow 2.7.2 / 2.8.1+ Fix from $1,9502022-09-16 HIGH 7.5 CVE-2022-36018 TensorFlow is an open source platform for machine learning. If `RaggedTensorToVariant` is given a `rt_nested_splits` list that contains tensors of ra… Tensorflow 2.7.2 / 2.8.1+ Fix from $1,9502022-09-16 HIGH 7.5 CVE-2022-36019 TensorFlow is an open source platform for machine learning. If `FakeQuantWithMinMaxVarsPerChannel` is given `min` or `max` tensors of a rank other th… Tensorflow 2.7.2 / 2.8.1+ Fix from $1,9502022-09-16 HIGH 7.5 CVE-2022-36026 TensorFlow is an open source platform for machine learning. If `QuantizeAndDequantizeV3` is given a nonscalar `num_bits` input tensor, it results in … Tensorflow 2.7.2 / 2.8.1+ Fix from $1,9502022-09-16 HIGH 7.5 CVE-2022-35968 TensorFlow is an open source platform for machine learning. The implementation of `AvgPoolGrad` does not fully validate the input `orig_input_shape`.… Tensorflow 2.7.2 / 2.8.1+ Fix from $1,9502022-09-16 HIGH 7.5 CVE-2022-35969 TensorFlow is an open source platform for machine learning. The implementation of `Conv2DBackpropInput` requires `input_sizes` to be 4-dimensional. O… Tensorflow 2.7.2 / 2.8.1+ Fix from $1,9502022-09-16 HIGH 7.5 CVE-2022-35971 TensorFlow is an open source platform for machine learning. If `FakeQuantWithMinMaxVars` is given `min` or `max` tensors of a nonzero rank, it result… Tensorflow 2.7.2 / 2.8.1+ Fix from $1,9502022-09-16 HIGH 7.5 CVE-2022-35935 TensorFlow is an open source platform for machine learning. The implementation of SobolSampleOp is vulnerable to a denial of service via CHECK-failur… Tensorflow 2.7.2 / 2.8.1+ Fix from $1,9502022-09-16 HIGH 7.5 CVE-2022-35941 TensorFlow is an open source platform for machine learning. The `AvgPoolOp` function takes an argument `ksize` that must be positive but is not check… Tensorflow 2.7.2 / 2.8.1+ Fix from $1,9502022-09-16 HIGH 7.5 CVE-2022-35952 TensorFlow is an open source platform for machine learning. The `UnbatchGradOp` function takes an argument `id` that is assumed to be a scalar. A non… Tensorflow 2.7.2 / 2.8.1+ Fix from $1,9502022-09-16