tensorflow

Vulnerabilities (427)

• CVE-2022-29199MedMay 20, 2022
  affected < 2.6.4fixed 2.6.4

  TensorFlow is an open source platform for machine learning. Prior to versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4, the implementation of `tf.raw_ops.LoadAndRemapMatrix does not fully validate the input arguments. This results in a `CHECK`-failure which can be used to trigger a denial

• CVE-2022-29198MedMay 20, 2022
  affected < 2.6.4fixed 2.6.4

  TensorFlow is an open source platform for machine learning. Prior to versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4, the implementation of `tf.raw_ops.SparseTensorToCSRSparseMatrix` does not fully validate the input arguments. This results in a `CHECK`-failure which can be used to trigg

• CVE-2022-29197MedMay 20, 2022
  affected < 2.6.4fixed 2.6.4

  TensorFlow is an open source platform for machine learning. Prior to versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4, the implementation of `tf.raw_ops.UnsortedSegmentJoin` does not fully validate the input arguments. This results in a `CHECK`-failure which can be used to trigger a denia

• CVE-2022-29196MedMay 20, 2022
  affected < 2.6.4fixed 2.6.4

  TensorFlow is an open source platform for machine learning. Prior to versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4, the implementation of `tf.raw_ops.Conv3DBackpropFilterV2` does not fully validate the input arguments. This results in a `CHECK`-failure which can be used to trigger a de

• CVE-2022-29195MedMay 20, 2022
  affected < 2.6.4fixed 2.6.4

  TensorFlow is an open source platform for machine learning. Prior to versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4, the implementation of `tf.raw_ops.StagePeek` does not fully validate the input arguments. This results in a `CHECK`-failure which can be used to trigger a denial of servi

• CVE-2022-29193MedMay 20, 2022
  affected < 2.6.4fixed 2.6.4

  TensorFlow is an open source platform for machine learning. Prior to versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4, the implementation of `tf.raw_ops.TensorSummaryV2` does not fully validate the input arguments. This results in a `CHECK`-failure which can be used to trigger a denial of

• CVE-2022-29194MedMay 20, 2022
  affected < 2.6.4fixed 2.6.4

  TensorFlow is an open source platform for machine learning. Prior to versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4, the implementation of `tf.raw_ops.DeleteSessionTensor` does not fully validate the input arguments. This results in a `CHECK`-failure which can be used to trigger a denia

• CVE-2022-29192MedMay 20, 2022
  affected < 2.6.4fixed 2.6.4

  TensorFlow is an open source platform for machine learning. Prior to versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4, the implementation of `tf.raw_ops.QuantizeAndDequantizeV4Grad` does not fully validate the input arguments. This results in a `CHECK`-failure which can be used to trigger

• CVE-2022-29191MedMay 20, 2022
  affected < 2.6.4fixed 2.6.4

  TensorFlow is an open source platform for machine learning. Prior to versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4, the implementation of `tf.raw_ops.GetSessionTensor` does not fully validate the input arguments. This results in a `CHECK`-failure which can be used to trigger a denial o

• CVE-2022-23595MedFeb 4, 2022
  affected < 2.5.3fixed 2.5.3

  Tensorflow is an Open Source Machine Learning Framework. When building an XLA compilation cache, if default settings are used, TensorFlow triggers a null pointer dereference. In the default scenario, all devices are allowed, so `flr->config_proto` is `nullptr`. The fix will be in

• CVE-2022-23594HigFeb 4, 2022
  affected >= 2.7.0, < 2.7.1fixed 2.7.1

  Tensorflow is an Open Source Machine Learning Framework. The TFG dialect of TensorFlow (MLIR) makes several assumptions about the incoming `GraphDef` before converting it to the MLIR-based dialect. If an attacker changes the `SavedModel` format on disk to invalidate these assumpt

• CVE-2022-23593MedFeb 4, 2022
  affected >= 2.8.0-rc0, < 2.8.0fixed 2.8.0

  Tensorflow is an Open Source Machine Learning Framework. The `simplifyBroadcast` function in the MLIR-TFRT infrastructure in TensorFlow is vulnerable to a segfault (hence, denial of service), if called with scalar shapes. If all shapes are scalar, then `maxRank` is 0, so we build

• CVE-2022-23592HigFeb 4, 2022
  affected >= 2.8.0-rc0, < 2.8.0fixed 2.8.0

  Tensorflow is an Open Source Machine Learning Framework. TensorFlow's type inference can cause a heap out of bounds read as the bounds checking is done in a `DCHECK` (which is a no-op during production). An attacker can control the `input_idx` variable such that `ix` would be lar

• CVE-2022-23591HigFeb 4, 2022
  affected < 2.5.3fixed 2.5.3

  Tensorflow is an Open Source Machine Learning Framework. The `GraphDef` format in TensorFlow does not allow self recursive functions. The runtime assumes that this invariant is satisfied. However, a `GraphDef` containing a fragment such as the following can be consumed when loadi

• CVE-2022-23590MedFeb 4, 2022
  affected < 2.7.1fixed 2.7.1

  Tensorflow is an Open Source Machine Learning Framework. A `GraphDef` from a TensorFlow `SavedModel` can be maliciously altered to cause a TensorFlow process to crash due to encountering a `StatusOr` value that is an error and forcibly extracting the value from it. We have patche

• CVE-2022-23589MedFeb 4, 2022
  affected < 2.5.3fixed 2.5.3

  Tensorflow is an Open Source Machine Learning Framework. Under certain scenarios, Grappler component of TensorFlow can trigger a null pointer dereference. There are 2 places where this can occur, for the same malicious alteration of a `SavedModel` file (fixing the first one would

• CVE-2022-23588MedFeb 4, 2022
  affected < 2.5.3fixed 2.5.3

  Tensorflow is an Open Source Machine Learning Framework. A malicious user can cause a denial of service by altering a `SavedModel` such that Grappler optimizer would attempt to build a tensor using a reference `dtype`. This would result in a crash due to a `CHECK`-fail in the `Te

• CVE-2022-23587HigFeb 4, 2022
  affected < 2.5.3fixed 2.5.3

  Tensorflow is an Open Source Machine Learning Framework. Under certain scenarios, Grappler component of TensorFlow is vulnerable to an integer overflow during cost estimation for crop and resize. Since the cropping parameters are user controlled, a malicious person can trigger un

• CVE-2022-23586MedFeb 4, 2022
  affected < 2.5.3fixed 2.5.3

  Tensorflow is an Open Source Machine Learning Framework. A malicious user can cause a denial of service by altering a `SavedModel` such that assertions in `function.cc` would be falsified and crash the Python interpreter. The fix will be included in TensorFlow 2.8.0. We will also

• CVE-2022-23585MedFeb 4, 2022
  affected < 2.5.3fixed 2.5.3

  Tensorflow is an Open Source Machine Learning Framework. When decoding PNG images TensorFlow can produce a memory leak if the image is invalid. After calling `png::CommonInitDecode(..., &decode)`, the `decode` value contains allocated buffers which can only be freed by calling `p