Vulnerabilidades em TensorFlow
403 resultadosAnálise Vexday
TensorFlow apresenta um perfil de risco baixo com apenas 2 vulnerabilidades registradas na base, nenhuma sob exploração ativa conhecida e nenhuma classificada como crítica. A fraqueza dominante identificada é CWE-427 (validação imprópria de índices), sem atualizações de risco nos últimos 90 dias, indicando um cenário estável.
CVE-2021-29539LOWSegfault in tf.raw_ops.ImmutableConstEPSS 0.2%CVE-2021-29534LOWCHECK-fail in SparseConcatEPSS 0.2%CVE-2021-29581LOWSegfault in `CTCBeamSearchDecoder`EPSS 0.2%CVE-2021-41203HIGHMissing validation during checkpoint loadingEPSS 0.2%CVE-2021-29554LOWDivision by 0 in `DenseCountSparseOutput`EPSS 0.2%CVE-2021-29517LOWDivision by zero in `Conv3D`EPSS 0.2%CVE-2021-29573LOWDivision by 0 in `MaxPoolGradWithArgmax`EPSS 0.2%CVE-2021-29567LOWLack of validation in `SparseDenseCwiseMul`EPSS 0.2%CVE-2021-29547LOWHeap out of bounds in `QuantizedBatchNormWithGlobalNormalization`EPSS 0.2%CVE-2021-29522LOWDivision by 0 in `Conv3DBackprop*`EPSS 0.2%CVE-2021-29552LOWCHECK-failure in `UnsortedSegmentJoin`EPSS 0.2%CVE-2021-29580LOWUndefined behavior and `CHECK`-fail in `FractionalMaxPoolGrad`EPSS 0.2%CVE-2021-29545LOWHeap buffer overflow in `SparseTensorToCSRSparseMatrix`EPSS 0.2%CVE-2021-29523LOWCHECK-fail in AddManySparseToTensorsMapEPSS 0.2%CVE-2021-29602LOWDivision by zero in TFLite's implementation of `DepthwiseConv`EPSS 0.2%CVE-2021-29584LOWCHECK-fail due to integer overflowEPSS 0.2%CVE-2021-29604LOWDivision by zero in TFLite's implementation of hashtable lookupEPSS 0.2%CVE-2021-29519LOWCHECK-fail in SparseCross due to type confusionEPSS 0.2%CVE-2021-29563LOWCHECK-fail in `tf.raw_ops.RFFT`EPSS 0.2%CVE-2021-29562LOWCHECK-fail in `tf.raw_ops.IRFFT`EPSS 0.2%