Browse CVEs

HIGH 7.5 CVE-2022-35969 TensorFlow is an open source platform for machine learning. The implementation of `Conv2DBackpropInput` requires `input_sizes` to be 4-dimensional. O… Tensorflow 2.7.2 / 2.8.1+ Fix from $1,9502022-09-16 HIGH 7.5 CVE-2022-35971 TensorFlow is an open source platform for machine learning. If `FakeQuantWithMinMaxVars` is given `min` or `max` tensors of a nonzero rank, it result… Tensorflow 2.7.2 / 2.8.1+ Fix from $1,9502022-09-16 HIGH 7.5 CVE-2022-35935 TensorFlow is an open source platform for machine learning. The implementation of SobolSampleOp is vulnerable to a denial of service via CHECK-failur… Tensorflow 2.7.2 / 2.8.1+ Fix from $1,9502022-09-16 HIGH 7.5 CVE-2022-35941 TensorFlow is an open source platform for machine learning. The `AvgPoolOp` function takes an argument `ksize` that must be positive but is not check… Tensorflow 2.7.2 / 2.8.1+ Fix from $1,9502022-09-16 HIGH 7.5 CVE-2022-35952 TensorFlow is an open source platform for machine learning. The `UnbatchGradOp` function takes an argument `id` that is assumed to be a scalar. A non… Tensorflow 2.7.2 / 2.8.1+ Fix from $1,9502022-09-16 HIGH 7.5 CVE-2022-35959 TensorFlow is an open source platform for machine learning. The implementation of `AvgPool3DGradOp` does not fully validate the input `orig_input_sha… Tensorflow 2.7.2+ Fix from $1,9502022-09-16 HIGH 7.5 CVE-2022-35960 TensorFlow is an open source platform for machine learning. In `core/kernels/list_kernels.cc's TensorListReserve`, `num_elements` is assumed to be a … Tensorflow 2.7.2+ Fix from $1,9502022-09-16 HIGH 7.5 CVE-2022-35963 TensorFlow is an open source platform for machine learning. The implementation of `FractionalAvgPoolGrad` does not fully validate the input `orig_inp… Tensorflow 2.7.2+ Fix from $1,9502022-09-16 HIGH 7.5 CVE-2022-35934 TensorFlow is an open source platform for machine learning. The implementation of tf.reshape op in TensorFlow is vulnerable to a denial of service vi… Tensorflow 2.7.2 / 2.8.1+ Fix from $1,9502022-09-16 MEDIUM 5.5 CVE-2022-29213 TensorFlow is an open source platform for machine learning. Prior to versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4, the `tf.compat.v1.signal.rfft2d` and `t… Tensorflow 2.6.4 / 2.7.2+ Fix from $1,6002022-05-21 MEDIUM 6.5 CVE-2022-23588 Tensorflow is an Open Source Machine Learning Framework. A malicious user can cause a denial of service by altering a `SavedModel` such that Grappler… Tensorflow after 2.6.2 Fix from $1,6002022-02-04 MEDIUM 6.5 CVE-2022-23565 Tensorflow is an Open Source Machine Learning Framework. An attacker can trigger denial of service via assertion failure by altering a `SavedModel` o… Tensorflow after 2.6.2 Fix from $1,6002022-02-04 MEDIUM 6.5 CVE-2022-23570 Tensorflow is an Open Source Machine Learning Framework. When decoding a tensor from protobuf, TensorFlow might do a null-dereference if attributes o… Tensorflow after 2.6.2 Fix from $1,6002022-02-04 MEDIUM 6.5 CVE-2022-23571 Tensorflow is an Open Source Machine Learning Framework. When decoding a tensor from protobuf, a TensorFlow process can encounter cases where a `CHEC… Tensorflow after 2.6.2 Fix from $1,6002022-02-04 MEDIUM 6.5 CVE-2022-23572 Tensorflow is an Open Source Machine Learning Framework. Under certain scenarios, TensorFlow can fail to specialize a type during shape inference. Th… Tensorflow after 2.6.2 Fix from $1,6002022-02-04 MEDIUM 6.5 CVE-2022-23579 Tensorflow is an Open Source Machine Learning Framework. The Grappler optimizer in TensorFlow can be used to cause a denial of service by altering a … Tensorflow after 2.6.2 Fix from $1,6002022-02-04 MEDIUM 6.5 CVE-2022-23581 Tensorflow is an Open Source Machine Learning Framework. The Grappler optimizer in TensorFlow can be used to cause a denial of service by altering a … Tensorflow after 2.6.2 Fix from $1,6002022-02-04 MEDIUM 6.5 CVE-2022-23582 Tensorflow is an Open Source Machine Learning Framework. A malicious user can cause a denial of service by altering a `SavedModel` such that `TensorB… Tensorflow after 2.6.2 Fix from $1,6002022-02-04 MEDIUM 6.5 CVE-2022-23583 Tensorflow is an Open Source Machine Learning Framework. A malicious user can cause a denial of service by altering a `SavedModel` such that any bina… Tensorflow after 2.6.2 Fix from $1,6002022-02-04 MEDIUM 6.5 CVE-2022-23586 Tensorflow is an Open Source Machine Learning Framework. A malicious user can cause a denial of service by altering a `SavedModel` such that assertio… Tensorflow after 2.6.2 Fix from $1,6002022-02-04 MEDIUM 6.5 CVE-2022-23564 Tensorflow is an Open Source Machine Learning Framework. When decoding a resource handle tensor from protobuf, a TensorFlow process can encounter cas… Tensorflow after 2.6.2 Fix from $1,6002022-02-04 MEDIUM 6.5 CVE-2022-23569 Tensorflow is an Open Source Machine Learning Framework. Multiple operations in TensorFlow can be used to trigger a denial of service via `CHECK`-fai… Tensorflow after 2.6.2 Fix from $1,6002022-02-03 MEDIUM 5.5 CVE-2021-41200 TensorFlow is an open source platform for machine learning. In affected versions if `tf.summary.create_file_writer` is called with non-scalar argumen… Tensorflow 2.4.4 / 2.5.2+ Fix from $1,6002021-11-05 MEDIUM 5.5 CVE-2021-37644 TensorFlow is an end-to-end open source platform for machine learning. In affected versions providing a negative element to `num_elements` list argum… Tensorflow 2.3.4 / 2.4.3+ Fix from $1,6002021-08-12 MEDIUM 5.5 CVE-2021-29552 TensorFlow is an end-to-end open source platform for machine learning. An attacker can cause a denial of service by controlling the values of `num_se… Tensorflow 2.1.4 / 2.2.3+ Fix from $1,6002021-05-14 MEDIUM 5.5 CVE-2021-29561 TensorFlow is an end-to-end open source platform for machine learning. An attacker can cause a denial of service by exploiting a `CHECK`-failure comi… Tensorflow 2.1.4 / 2.2.3+ Fix from $1,6002021-05-14 MEDIUM 5.5 CVE-2021-29562 TensorFlow is an end-to-end open source platform for machine learning. An attacker can cause a denial of service by exploiting a `CHECK`-failure comi… Tensorflow 2.1.4 / 2.2.3+ Fix from $1,6002021-05-14 MEDIUM 5.5 CVE-2021-29563 TensorFlow is an end-to-end open source platform for machine learning. An attacker can cause a denial of service by exploiting a `CHECK`-failure comi… Tensorflow 2.1.4 / 2.2.3+ Fix from $1,6002021-05-14 MEDIUM 5.5 CVE-2021-29567 TensorFlow is an end-to-end open source platform for machine learning. Due to lack of validation in `tf.raw_ops.SparseDenseCwiseMul`, an attacker can… Tensorflow 2.1.4 / 2.2.3+ Fix from $1,6002021-05-14 MEDIUM 5.5 CVE-2021-29543 TensorFlow is an end-to-end open source platform for machine learning. An attacker can trigger a denial of service via a `CHECK`-fail in `tf.raw_ops.… Tensorflow 2.1.4 / 2.2.3+ Fix from $1,6002021-05-14