Vulnerabilities in TensorFlow

403 results
Vexday analysis

TensorFlow apresenta um perfil de risco baixo com apenas 2 vulnerabilidades registradas na base, nenhuma sob exploração ativa conhecida e nenhuma classificada como crítica. A fraqueza dominante identificada é CWE-427 (validação imprópria de índices), sem atualizações de risco nos últimos 90 dias, indicando um cenário estável.

CVE-2021-29538LOWDivision by zero in `Conv2DBackpropFilter`EPSS 0.2%CVE-2021-29602LOWDivision by zero in TFLite's implementation of `DepthwiseConv`EPSS 0.2%CVE-2021-29519LOWCHECK-fail in SparseCross due to type confusionEPSS 0.2%CVE-2021-29552LOWCHECK-failure in `UnsortedSegmentJoin`EPSS 0.2%CVE-2021-29562LOWCHECK-fail in `tf.raw_ops.IRFFT`EPSS 0.2%CVE-2021-29543LOWCHECK-fail in `CTCGreedyDecoder`EPSS 0.2%CVE-2021-29557LOWDivision by 0 in `SparseMatMul`EPSS 0.2%CVE-2021-29573LOWDivision by 0 in `MaxPoolGradWithArgmax`EPSS 0.2%CVE-2021-29567LOWLack of validation in `SparseDenseCwiseMul`EPSS 0.2%CVE-2021-29548LOWDivision by 0 in `QuantizedBatchNormWithGlobalNormalization`EPSS 0.2%CVE-2021-29556LOWDivision by 0 in `Reverse`EPSS 0.2%CVE-2021-41217MEDIUMNull pointer exception when `Exit` node is not preceded by `Enter` opEPSS 0.2%CVE-2021-41215MEDIUMNull pointer exception in `DeserializeSparse`EPSS 0.2%CVE-2021-41222MEDIUMSegfault due to negative splits in `SplitV`EPSS 0.2%CVE-2021-37648HIGHIncorrect validation of `SaveV2` inputs in TensorFlowEPSS 0.2%CVE-2021-37665HIGHIncomplete validation in MKL requantization in TensorFlowEPSS 0.2%CVE-2021-37650HIGHSegfault and heap buffer overflow in `{Experimental,}DatasetToTFRecord` in TensorFlowEPSS 0.2%CVE-2021-37679HIGHHeap OOB in nested `tf.map_fn` with `RaggedTensor`s in TensorFlowEPSS 0.2%CVE-2021-37682MEDIUMUse of unitialized value in TensorFlow LiteEPSS 0.2%CVE-2021-41206HIGHIncomplete validation of shapes in multiple TF opsEPSS 0.2%