Open actionable advisories and recorded vendor fixes. This public package view has no inventory attached and cannot establish whether your deployment is affected. A vendor fix never resolves your finding; verify your installed version and the source guidance.
Open advisories
433 actionable advisories, newest first. Withdrawn advisories and news are excluded. Coverage is partial.
Impact arrayops.upperbound causes a segfault when not given a rank 2 tensor. Patches We have patched the issue in GitHub commit 915884fdf5df34aaedd00fc6ace33a2cfdefa586. The fix will be included in TensorFlow 2.13. We will also cherrypick this commit in TensorFlow 2.12.1. For more information Please consult our security guide for more information regarding the security model and how to contact us with issues and questions. Attribution This vulnerability has been reported by dmc1778
Recommended action: Upgrade to 2.12.1 or later, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.
Impact A malicious invalid input crashes a tensorflow model (Check Failed) and can be used to trigger a denial of service attack. To minimize the bug, we built a simple single-layer TensorFlow model containing a Convolution3DTranspose layer, which works well with expected inputs and can be deployed in real-world systems. However, if we call the model with a malicious input which has a zero dimension, it gives Check Failed failure and crashes. This Convolution3DTranspose layer is a very common API in modern neural networks. The ML models containing such vulnerable components could be deployed in ML applications or as cloud services. This failure could be potentially used to trigger a denial of service attack on ML cloud services. Patches We have patched the issue in - GitHub commit 948fe6369a5711d4b4568ea9bbf6015c6dfb77e2 - GitHub commit 85db5d07db54b853484bfd358c3894d948c36baf. The fix will be included in TensorFlow 2.12.0. We will also cherrypick this commit on TensorFlow 2.11.1 For…
Recommended action: Upgrade to 2.11.1 or later, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.
Impact If the parameter indices for DynamicStitch does not match the shape of the parameter data, it can trigger an stack OOB read. Patches We have patched the issue in GitHub commit ee004b18b976eeb5a758020af8880236cd707d05. The fix will be included in TensorFlow 2.12. We will also cherrypick this commit on TensorFlow 2.11.1. For more information Please consult our security guide for more information regarding the security model and how to contact us with issues and questions. Attribution This has been reported via Google OSS VRP.
Recommended action: Upgrade to 2.11.1 or later, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.
Impact When the parameter summarize of tf.rawops.Print is zero, the new method SummarizeArray<bool will reference to a nullptr, leading to a seg fault. Patches We have patched the issue in GitHub commit 6d423b8bcc9aa9f5554dc988c1c16d038b508df1. The fix will be included in TensorFlow 2.12. We will also cherrypick this commit on TensorFlow 2.11.1. For more information Please consult our security guide for more information regarding the security model and how to contact us with issues and questions. Attribution This vulnerability has been reported by Yu Tian of Qihoo 360 AIVul Team
Recommended action: Upgrade to 2.11.1 or later, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.
Impact TFversion 2.11.0 //tensorflow/core/ops/arrayops.cc:1067 const Tensor hypothesisshapet = c-inputtensor(2); std::vector<DimensionHandle dims(hypothesisshapet-NumElements() - 1); for (int i = 0; i < dims.size(); ++i) { dims[i] = c-MakeDim(std::max(hvalues(i), tvalues(i))); } if hypothesisshapet is empty, hypothesisshapet-NumElements() - 1 will be integer overflow, and the it will deadlock Patches We have patched the issue in GitHub commit 08b8e18643d6dcde00890733b270ff8d9960c56c. The fix will be included in TensorFlow 2.12.0. We will also cherrypick this commit on TensorFlow 2.11.1 For more information Please consult our security guide for more information regarding the security model and how to contact us with issues and questions. Attribution This vulnerability has been reported by r3pwnx
Recommended action: Upgrade to 2.11.1 or later, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.
Impact When ctx-stepcontainter() is a null ptr, the Lookup function will be executed with a null pointer. Patches We have patched the issue in GitHub commit 239139d2ae6a81ae9ba499ad78b56d9b2931538a. The fix will be included in TensorFlow 2.12.0. We will also cherrypick this commit on TensorFlow 2.11.1 For more information Please consult our security guide for more information regarding the security model and how to contact us with issues and questions. Attribution This vulnerability has been reported by Yu Tian
Recommended action: Upgrade to 2.11.1 or later, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.
Impact Patches We have patched the issue in GitHub commit ddaac2bdd099bec5d7923dea45276a7558217e5b. The fix will be included in TensorFlow 2.12.0. We will also cherrypick this commit on TensorFlow 2.11.1 For more information Please consult our security guide for more information regarding the security model and how to contact us with issues and questions. Attribution This vulnerability has been reported by <evn@google.com
Recommended action: Upgrade to 2.11.1 or later, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.
Impact When SparseSparseMaximum is given invalid sparse tensors as inputs, it can give an NPE. Patches We have patched the issue in GitHub commit 5e0ecfb42f5f65629fd7a4edd6c4afe7ff0feb04. The fix will be included in TensorFlow 2.12. We will also cherrypick this commit on TensorFlow 2.11.1. For more information Please consult our security guide for more information regarding the security model and how to contact us with issues and questions. Attribution This vulnerability has been reported by Yu Tian of Qihoo 360 AIVul Team
Recommended action: Upgrade to 2.11.1 or later, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.
Impact version:2.11.0 //core/ops/audioops.cc:70 Status SpectrogramShapeFn(InferenceContext c) { ShapeHandle input; TFRETURNIFERROR(c-WithRank(c-input(0), 2, &input)); int32t windowsize; TFRETURNIFERROR(c-GetAttr("windowsize", &windowsize)); int32t stride; TFRETURNIFERROR(c-GetAttr("stride", &stride)); .....[1] DimensionHandle inputlength = c-Dim(input, 0); DimensionHandle inputchannels = c-Dim(input, 1); DimensionHandle outputlength; if (!c-ValueKnown(inputlength)) { outputlength = c-UnknownDim(); } else { const int64t inputlengthvalue = c-Value(inputlength); const int64t lengthminuswindow = (inputlengthvalue - windowsize); int64t outputlengthvalue; if (lengthminuswindow < 0) { outputlengthvalue = 0; } else { outputlengthvalue = 1 + (lengthminuswindow / stride); .....[2] } outputlength = c-MakeDim(outputlengthvalue); } Get the value of stride at [1], and the used at [2] Patches We have patched the issue in GitHub commit d0d4e779da0d0f56499c6fa5ba09f0a576cc6b14. The fix will be…
Recommended action: Upgrade to 2.11.1 or later, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.
Impact Integer overflow occurs when 2^31 <= numframes height width channels < 2^32, for example Full HD screencast of at least 346 frames. Patches We have patched the issue in GitHub commit 8dc723fcdd1a6127d6c970bd2ecb18b019a1a58d. The fix will be included in TensorFlow 2.12.0. We will also cherrypick this commit on TensorFlow 2.11.1 For more information Please consult our security guide for more information regarding the security model and how to contact us with issues and questions. Attribution This vulnerability has been reported by Andrei
Recommended action: Upgrade to 2.11.1 or later, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.
Impact Attackers using Tensorflow can exploit the vulnerability. They can access heap memory which is not in the control of user, leading to a crash or RCE. When axis is larger than the dim of input, c-Dim(input,axis) goes out of bound. Same problem occurs in the QuantizeAndDequantizeV2/V3/V4/V4Grad operations too. Patches We have patched the issue in GitHub commit 7b174a0f2e40ff3f3aa957aecddfd5aaae35eccb. The fix will be included in TensorFlow 2.12.0. We will also cherrypick this commit on TensorFlow 2.11.1 For more information Please consult our security guide for more information regarding the security model and how to contact us with issues and questions.
Recommended action: Upgrade to 2.11.1 or later, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.
Impact If the stride and window size are not positive for tf.rawops.AvgPoolGrad, it can give an FPE. Patches We have patched the issue in GitHub commit 1295ae4dbb52fe06b19733b0257e2340d7b63b8d. The fix will be included in TensorFlow 2.12. We will also cherrypick this commit on TensorFlow 2.11.1. For more information Please consult our security guide for more information regarding the security model and how to contact us with issues and questions. Attribution This vulnerability has been reported by r3pwnx of 360 AIVul Team
Recommended action: Upgrade to 2.11.1 or later, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.
Impact NPE in QuantizedMatMulWithBiasAndDequantize with MKL enable Patches We have patched the issue in GitHub commit 8a47a39d9697969206d23a523c977238717e8727. The fix will be included in TensorFlow 2.12.0. We will also cherrypick this commit on TensorFlow 2.11.1 For more information Please consult our security guide for more information regarding the security model and how to contact us with issues and questions. Attribution This vulnerability has been reported by r3pwnx
Recommended action: Upgrade to 2.11.1 or later, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.
Impact Out-of-bounds access due to mismatched integer type sizes in ValueMap::Manager::GetValueOrCreatePlaceholder. Bug with tfg-translate call to InitMlir. The problem happens with generic functions, as it is already handled for non-generic functions. This is because they, unlike non-generic functions, are using the "old importer". A better long-term solution may be to have the "new importer" handle generic functions. Patches We have patched the issue in GitHub - commit 760322a71ac9033e122ef1f4b1c62813021e5938. - commit 2eedc8f676d2c3b8be9492e547b2bc814c10b367 The fix will be included in TensorFlow 2.12.0. We will also cherrypick this commit on TensorFlow 2.11.1 For more information Please consult our security guide for more information regarding the security model and how to contact us with issues and questions. Attribution This vulnerability has been reported by r3pwnx Affiliation 360 AIVul
Recommended action: Upgrade to 2.11.1 or later, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.
Impact The function tf.rawops.LookupTableImportV2 cannot handle scalars in the values parameter and gives an NPE. Patches We have patched the issue in GitHub commit 980b22536abcbbe1b4a5642fc940af33d8c19b69. The fix will be included in TensorFlow 2.12. We will also cherrypick this commit on TensorFlow 2.11.1. For more information Please consult our security guide for more information regarding the security model and how to contact us with issues and questions. Attribution This vulnerability has been reported by r3pwnx of 360 AIVul Team
Recommended action: Upgrade to 2.11.1 or later, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.
Impact FPE in TensorListSplit with XLA Patches We have patched the issue in GitHub commit 728113a3be690facad6ce436660a0bc1858017fa. The fix will be included in TensorFlow 2.12.0. We will also cherrypick this commit on TensorFlow 2.11.1 For more information Please consult our security guide for more information regarding the security model and how to contact us with issues and questions. Attribution This vulnerability has been reported by r3pwnx
Recommended action: Upgrade to 2.11.1 or later, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.
Impact NPE in RandomShuffle with XLA enable Patches We have patched the issue in GitHub commit 728113a3be690facad6ce436660a0bc1858017fa. The fix will be included in TensorFlow 2.12.0. We will also cherrypick this commit on TensorFlow 2.11.1 For more information Please consult our security guide for more information regarding the security model and how to contact us with issues and questions. Attribution This vulnerability has been reported by r3pwnx
Recommended action: Upgrade to 2.11.1 or later, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.
Impact When running with XLA, tf.rawops.Bincount segfaults when given a parameter weights that is neither the same shape as parameter arr nor a length-0 tensor. Patches We have patched the issue in GitHub commit 8ae76cf085f4be26295d2ecf2081e759e04b8acf. The fix will be included in TensorFlow 2.12. We will also cherrypick this commit on TensorFlow 2.11.1. For more information Please consult our security guide for more information regarding the security model and how to contact us with issues and questions. Attribution This vulnerability has been reported by r3pwnx of 360 AIVul Team
Recommended action: Upgrade to 2.11.1 or later, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.
Impact When running with XLA, tf.rawops.ParallelConcat segfaults with a nullptr dereference when given a parameter shape with rank that is not greater than zero. Patches We have patched the issue in GitHub commit da66bc6d5ff466aee084f9e7397980a24890cd15. The fix will be included in TensorFlow 2.12. We will also cherrypick this commit on TensorFlow 2.11.1. For more information Please consult our security guide for more information regarding the security model and how to contact us with issues and questions. Attribution This vulnerability has been reported by r3pwnx of 360 AIVul Team
Recommended action: Upgrade to 2.11.1 or later, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.
Impact nnops.fractionalavgpoolv2 and nnops.fractionalmaxpoolv2 require the first and fourth elements of their parameter poolingratio to be equal to 1.0, as pooling on batch and channel dimensions is not supported. Patches We have patched the issue in GitHub commit ee50d1e00f81f62a4517453f721c634bbb478307. The fix will be included in TensorFlow 2.12. We will also cherrypick this commit on TensorFlow 2.11.1. For more information Please consult our security guide for more information regarding the security model and how to contact us with issues and questions. Attribution This vulnerability was reported by dmc1778, of nimashiri2012@gmail.com.
Recommended action: Upgrade to 2.11.1 or later, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.
Impact Constructing a tflite model with a paramater filterinputchannel of less than 1 gives a FPE. Patches We have patched the issue in GitHub commit 34f8368c535253f5c9cb3a303297743b62442aaa. The fix will be included in TensorFlow 2.12. We will also cherrypick this commit on TensorFlow 2.11.1. For more information Please consult our security guide for more information regarding the security model and how to contact us with issues and questions. Attribution This vulnerability was reported by Wang Xuan of Qihoo 360 AIVul Team.
Recommended action: Upgrade to 2.11.1 or later, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.
Impact Out of bounds read in GRUBlockCellGrad Patches We have patched the issue in GitHub commit ff459137c2716a2a60f7d441b855fcb466d778cb. The fix will be included in TensorFlow 2.12.0. We will also cherrypick this commit on TensorFlow 2.11.1 For more information Please consult our security guide for more information regarding the security model and how to contact us with issues and questions. Attribution This vulnerability has been reported by r3pwnx.
Recommended action: Upgrade to 2.11.1 or later, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.
Impact When the BaseCandidateSamplerOp function receives a value in trueclasses larger than rangemax, a heap oob vuln occurs. Patches We have patched the issue in GitHub commit b389f5c944cadfdfe599b3f1e4026e036f30d2d4. The fix will be included in TensorFlow 2.11. We will also cherrypick this commit on TensorFlow 2.10.1, 2.9.3, and TensorFlow 2.8.4, as these are also affected and still in supported range. For more information Please consult our security guide for more information regarding the security model and how to contact us with issues and questions. Attribution This vulnerability has been reported by Yu Tian of Qihoo 360 AIVul Team.
Recommended action: Upgrade to 2.10.1, 2.9.3 or 2.8.4 by release line, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.
Impact Another instance of CVE-2022-35935, where SobolSample is vulnerable to a denial of service via assumed scalar inputs, was found and fixed. Patches We have patched the issue in GitHub commits c65c67f88ad770662e8f191269a907bf2b94b1bf and 02400ea266bd811fc016a848445de1bbff3a23a0 The fix will be included in TensorFlow 2.11. We will also cherrypick both commits on TensorFlow 2.10.1, 2.9.3, and TensorFlow 2.8.4, as these are also affected and still in supported range. TensorFlow 2.7.4 will have the first commit cherrypicked. For more information Please consult our security guide for more information regarding the security model and how to contact us with issues and questions. Attribution This vulnerability has been reported by: - Kang Hong Jin from Singapore Management University - Neophytos Christou, Secure Systems Labs, Brown University - 刘力源, Information System & Security and Countermeasures Experiments Center, Beijing Institute of Technology - Pattarakrit Rattankul
Recommended action: Upgrade to 2.10.1, 2.9.3 or 2.8.4 by release line, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.
Impact Another instance of CVE-2022-35991, where TensorListScatter and TensorListScatterV2 crash via non scalar inputs inelementshape, was found in eager mode and fixed. Patches We have patched the issue in GitHub commit bf9932fc907aff0e9e8cccf769e8b00d30fd81a1. The fix will be included in TensorFlow 2.11. We will also cherrypick this commit on TensorFlow 2.10.1, 2.9.3, and TensorFlow 2.8.4, as these are also affected and still in supported range. For more information Please consult our security guide for more information regarding the security model and how to contact us with issues and questions. Attribution This vulnerability has been reported by Pattarakrit Rattankul
Recommended action: Upgrade to 2.10.1, 2.9.3 or 2.8.4 by release line, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.