Логотип exploitDog
bind:CVE-2021-37681
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2021-37681

Количество 4

Количество 4

nvd логотип

CVE-2021-37681

больше 4 лет назад

TensorFlow is an end-to-end open source platform for machine learning. In affected versions the implementation of SVDF in TFLite is [vulnerable to a null pointer error](https://github.com/tensorflow/tensorflow/blob/460e000de3a83278fb00b61a16d161b1964f15f4/tensorflow/lite/kernels/svdf.cc#L300-L313). The [`GetVariableInput` function](https://github.com/tensorflow/tensorflow/blob/460e000de3a83278fb00b61a16d161b1964f15f4/tensorflow/lite/kernels/kernel_util.cc#L115-L119) can return a null pointer but `GetTensorData` assumes that the argument is always a valid tensor. Furthermore, because `GetVariableInput` calls [`GetMutableInput`](https://github.com/tensorflow/tensorflow/blob/460e000de3a83278fb00b61a16d161b1964f15f4/tensorflow/lite/kernels/kernel_util.cc#L82-L90) which might return `nullptr`, the `tensor->is_variable` expression can also trigger a null pointer exception. We have patched the issue in GitHub commit 5b048e87e4e55990dae6b547add4dae59f4e1c76. The fix will be included in TensorF

CVSS3: 7.8
EPSS: Низкий
debian логотип

CVE-2021-37681

больше 4 лет назад

TensorFlow is an end-to-end open source platform for machine learning. ...

CVSS3: 7.8
EPSS: Низкий
github логотип

GHSA-7xwj-5r4v-429p

больше 4 лет назад

NPE in TFLite

CVSS3: 7.8
EPSS: Низкий
suse-cvrf логотип

openSUSE-SU-2022:10014-1

больше 3 лет назад

Security update for tensorflow2

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2021-37681

TensorFlow is an end-to-end open source platform for machine learning. In affected versions the implementation of SVDF in TFLite is [vulnerable to a null pointer error](https://github.com/tensorflow/tensorflow/blob/460e000de3a83278fb00b61a16d161b1964f15f4/tensorflow/lite/kernels/svdf.cc#L300-L313). The [`GetVariableInput` function](https://github.com/tensorflow/tensorflow/blob/460e000de3a83278fb00b61a16d161b1964f15f4/tensorflow/lite/kernels/kernel_util.cc#L115-L119) can return a null pointer but `GetTensorData` assumes that the argument is always a valid tensor. Furthermore, because `GetVariableInput` calls [`GetMutableInput`](https://github.com/tensorflow/tensorflow/blob/460e000de3a83278fb00b61a16d161b1964f15f4/tensorflow/lite/kernels/kernel_util.cc#L82-L90) which might return `nullptr`, the `tensor->is_variable` expression can also trigger a null pointer exception. We have patched the issue in GitHub commit 5b048e87e4e55990dae6b547add4dae59f4e1c76. The fix will be included in TensorF

CVSS3: 7.8
0%
Низкий
больше 4 лет назад
debian логотип
CVE-2021-37681

TensorFlow is an end-to-end open source platform for machine learning. ...

CVSS3: 7.8
0%
Низкий
больше 4 лет назад
github логотип
GHSA-7xwj-5r4v-429p

NPE in TFLite

CVSS3: 7.8
0%
Низкий
больше 4 лет назад
suse-cvrf логотип
openSUSE-SU-2022:10014-1

Security update for tensorflow2

больше 3 лет назад

Уязвимостей на страницу