Browse CVEs

HIGH 7.8 CVE-2021-29588 TensorFlow is an end-to-end open source platform for machine learning. The optimized implementation of the `TransposeConv` TFLite operator is [vulner… Tensorflow 2.1.4 / 2.2.3+ Fix from $1,9502021-05-14 HIGH 7.8 CVE-2021-29589 TensorFlow is an end-to-end open source platform for machine learning. The reference implementation of the `GatherNd` TFLite operator is vulnerable t… Tensorflow 2.1.4 / 2.2.3+ Fix from $1,9502021-05-14 HIGH 7.1 CVE-2021-29582 TensorFlow is an end-to-end open source platform for machine learning. Due to lack of validation in `tf.raw_ops.Dequantize`, an attacker can trigger … Tensorflow 2.1.4 / 2.2.3+ Fix from $1,9502021-05-14 HIGH 7.1 CVE-2021-29590 TensorFlow is an end-to-end open source platform for machine learning. The implementations of the `Minimum` and `Maximum` TFLite operators can be use… Tensorflow 2.1.4 / 2.2.3+ Fix from $1,9502021-05-14 MEDIUM 5.5 CVE-2021-29575 TensorFlow is an end-to-end open source platform for machine learning. The implementation of `tf.raw_ops.ReverseSequence` allows for stack overflow a… Tensorflow 2.2.3 / 2.3.3+ Fix from $1,6002021-05-14 MEDIUM 5.5 CVE-2021-29580 TensorFlow is an end-to-end open source platform for machine learning. The implementation of `tf.raw_ops.FractionalMaxPoolGrad` triggers an undefined… Tensorflow 2.1.4 / 2.2.3+ Fix from $1,6002021-05-14 MEDIUM 5.5 CVE-2021-29581 TensorFlow is an end-to-end open source platform for machine learning. Due to lack of validation in `tf.raw_ops.CTCBeamSearchDecoder`, an attacker ca… Tensorflow 2.1.4 / 2.2.3+ Fix from $1,6002021-05-14 MEDIUM 5.5 CVE-2021-29584 TensorFlow is an end-to-end open source platform for machine learning. An attacker can trigger a denial of service via a `CHECK`-fail in caused by an… Tensorflow 2.1.4 / 2.2.3+ Fix from $1,6002021-05-14 HIGH 7.8 CVE-2021-29558 TensorFlow is an end-to-end open source platform for machine learning. An attacker can cause a heap buffer overflow in `tf.raw_ops.SparseSplit`. This… Tensorflow 2.1.4 / 2.2.3+ Fix from $1,9502021-05-14 HIGH 7.8 CVE-2021-29566 TensorFlow is an end-to-end open source platform for machine learning. An attacker can write outside the bounds of heap allocated arrays by passing i… Tensorflow 2.1.4 / 2.2.3+ Fix from $1,9502021-05-14 HIGH 7.8 CVE-2021-29568 TensorFlow is an end-to-end open source platform for machine learning. An attacker can trigger undefined behavior by binding to null pointer in `tf.r… Tensorflow 2.1.4 / 2.2.3+ Fix from $1,9502021-05-14 HIGH 7.8 CVE-2021-29571 TensorFlow is an end-to-end open source platform for machine learning. The implementation of `tf.raw_ops.MaxPoolGradWithArgmax` can cause reads outsi… Tensorflow 2.1.4 / 2.2.3+ Fix from $1,9502021-05-14 HIGH 7.1 CVE-2021-29553 TensorFlow is an end-to-end open source platform for machine learning. An attacker can read data outside of bounds of heap allocated buffer in `tf.ra… Tensorflow 2.1.4 / 2.2.3+ Fix from $1,9502021-05-14 HIGH 7.1 CVE-2021-29559 TensorFlow is an end-to-end open source platform for machine learning. An attacker can access data outside of bounds of heap allocated array in `tf.r… Tensorflow 2.1.4 / 2.2.3+ Fix from $1,9502021-05-14 HIGH 7.1 CVE-2021-29560 TensorFlow is an end-to-end open source platform for machine learning. An attacker can cause a heap buffer overflow in `tf.raw_ops.RaggedTensorToTens… Tensorflow 2.1.4 / 2.2.3+ Fix from $1,9502021-05-14 HIGH 7.1 CVE-2021-29569 TensorFlow is an end-to-end open source platform for machine learning. The implementation of `tf.raw_ops.MaxPoolGradWithArgmax` can cause reads outsi… Tensorflow 2.1.4 / 2.2.3+ Fix from $1,9502021-05-14 HIGH 7.1 CVE-2021-29570 TensorFlow is an end-to-end open source platform for machine learning. The implementation of `tf.raw_ops.MaxPoolGradWithArgmax` can cause reads outsi… Tensorflow 2.1.4 / 2.2.3+ Fix from $1,9502021-05-14 MEDIUM 5.5 CVE-2021-29551 TensorFlow is an end-to-end open source platform for machine learning. The implementation of `MatrixTriangularSolve`(https://github.com/tensorflow/te… Tensorflow 2.1.4 / 2.2.3+ Fix from $1,6002021-05-14 MEDIUM 5.5 CVE-2021-29552 TensorFlow is an end-to-end open source platform for machine learning. An attacker can cause a denial of service by controlling the values of `num_se… Tensorflow 2.1.4 / 2.2.3+ Fix from $1,6002021-05-14 MEDIUM 5.5 CVE-2021-29555 TensorFlow is an end-to-end open source platform for machine learning. An attacker can cause a denial of service via a FPE runtime error in `tf.raw_o… Tensorflow 2.1.4 / 2.2.3+ Fix from $1,6002021-05-14 MEDIUM 5.5 CVE-2021-29556 TensorFlow is an end-to-end open source platform for machine learning. An attacker can cause a denial of service via a FPE runtime error in `tf.raw_o… Tensorflow 2.1.4 / 2.2.3+ Fix from $1,6002021-05-14 MEDIUM 5.5 CVE-2021-29557 TensorFlow is an end-to-end open source platform for machine learning. An attacker can cause a denial of service via a FPE runtime error in `tf.raw_o… Tensorflow 2.1.4 / 2.2.3+ Fix from $1,6002021-05-14 MEDIUM 5.5 CVE-2021-29561 TensorFlow is an end-to-end open source platform for machine learning. An attacker can cause a denial of service by exploiting a `CHECK`-failure comi… Tensorflow 2.1.4 / 2.2.3+ Fix from $1,6002021-05-14 MEDIUM 5.5 CVE-2021-29562 TensorFlow is an end-to-end open source platform for machine learning. An attacker can cause a denial of service by exploiting a `CHECK`-failure comi… Tensorflow 2.1.4 / 2.2.3+ Fix from $1,6002021-05-14 MEDIUM 5.5 CVE-2021-29563 TensorFlow is an end-to-end open source platform for machine learning. An attacker can cause a denial of service by exploiting a `CHECK`-failure comi… Tensorflow 2.1.4 / 2.2.3+ Fix from $1,6002021-05-14 MEDIUM 5.5 CVE-2021-29564 TensorFlow is an end-to-end open source platform for machine learning. An attacker can trigger a null pointer dereference in the implementation of `t… Tensorflow 2.1.4 / 2.2.3+ Fix from $1,6002021-05-14 MEDIUM 5.5 CVE-2021-29565 TensorFlow is an end-to-end open source platform for machine learning. An attacker can trigger a null pointer dereference in the implementation of `t… Tensorflow 2.1.4 / 2.2.3+ Fix from $1,6002021-05-14 MEDIUM 5.5 CVE-2021-29567 TensorFlow is an end-to-end open source platform for machine learning. Due to lack of validation in `tf.raw_ops.SparseDenseCwiseMul`, an attacker can… Tensorflow 2.1.4 / 2.2.3+ Fix from $1,6002021-05-14 MEDIUM 5.5 CVE-2021-29572 TensorFlow is an end-to-end open source platform for machine learning. The implementation of `tf.raw_ops.SdcaOptimizer` triggers undefined behavior d… Tensorflow 2.1.4 / 2.2.3+ Fix from $1,6002021-05-14 MEDIUM 5.5 CVE-2021-29573 TensorFlow is an end-to-end open source platform for machine learning. The implementation of `tf.raw_ops.MaxPoolGradWithArgmax` is vulnerable to a di… Tensorflow 2.1.4 / 2.2.3+ Fix from $1,6002021-05-14