Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-5w96-866f-6rm8

Опубликовано: 24 мар. 2023
Источник: github
Github: Прошло ревью
CVSS3: 7.5

Описание

TensorFlow has Floating Point Exception in TFLite in conv kernel

Impact

Constructing a tflite model with a paramater filter_input_channel of less than 1 gives a FPE.

Patches

We have patched the issue in GitHub commit 34f8368c535253f5c9cb3a303297743b62442aaa.

The fix will be included in TensorFlow 2.12. We will also cherrypick this commit on TensorFlow 2.11.1.

For more information

Please consult our security guide for more information regarding the security model and how to contact us with issues and questions.

Attribution

This vulnerability was reported by Wang Xuan of Qihoo 360 AIVul Team.

Пакеты

Наименование

tensorflow

pip
Затронутые версииВерсия исправления

< 2.11.1

2.11.1

Наименование

tensorflow-cpu

pip
Затронутые версииВерсия исправления

< 2.11.1

2.11.1

Наименование

tensorflow-gpu

pip
Затронутые версииВерсия исправления

< 2.11.1

2.11.1

EPSS

Процентиль: 40%
0.00183
Низкий

7.5 High

CVSS3

Дефекты

CWE-697

Связанные уязвимости

CVSS3: 7.5
nvd
почти 3 года назад

TensorFlow is an end-to-end open source platform for machine learning. Constructing a tflite model with a paramater `filter_input_channel` of less than 1 gives a FPE. This issue has been patched in version 2.12. TensorFlow will also cherrypick the fix commit on TensorFlow 2.11.1.

CVSS3: 7.5
msrc
больше 1 года назад

Описание отсутствует

CVSS3: 7.5
debian
почти 3 года назад

TensorFlow is an end-to-end open source platform for machine learning. ...

EPSS

Процентиль: 40%
0.00183
Низкий

7.5 High

CVSS3

Дефекты

CWE-697