Логотип exploitDog
bind:CVE-2021-29614
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2021-29614

Количество 3

Количество 3

nvd логотип

CVE-2021-29614

больше 4 лет назад

TensorFlow is an end-to-end open source platform for machine learning. The implementation of `tf.io.decode_raw` produces incorrect results and crashes the Python interpreter when combining `fixed_length` and wider datatypes. The implementation of the padded version(https://github.com/tensorflow/tensorflow/blob/1d8903e5b167ed0432077a3db6e462daf781d1fe/tensorflow/core/kernels/decode_padded_raw_op.cc) is buggy due to a confusion about pointer arithmetic rules. First, the code computes(https://github.com/tensorflow/tensorflow/blob/1d8903e5b167ed0432077a3db6e462daf781d1fe/tensorflow/core/kernels/decode_padded_raw_op.cc#L61) the width of each output element by dividing the `fixed_length` value to the size of the type argument. The `fixed_length` argument is also used to determine the size needed for the output tensor(https://github.com/tensorflow/tensorflow/blob/1d8903e5b167ed0432077a3db6e462daf781d1fe/tensorflow/core/kernels/decode_padded_raw_op.cc#L63-L79). This is followed by reencoding c

CVSS3: 7.1
EPSS: Низкий
debian логотип

CVE-2021-29614

больше 4 лет назад

TensorFlow is an end-to-end open source platform for machine learning. ...

CVSS3: 7.1
EPSS: Низкий
github логотип

GHSA-8pmx-p244-g88h

больше 4 лет назад

Interpreter crash from `tf.io.decode_raw`

CVSS3: 7.1
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2021-29614

TensorFlow is an end-to-end open source platform for machine learning. The implementation of `tf.io.decode_raw` produces incorrect results and crashes the Python interpreter when combining `fixed_length` and wider datatypes. The implementation of the padded version(https://github.com/tensorflow/tensorflow/blob/1d8903e5b167ed0432077a3db6e462daf781d1fe/tensorflow/core/kernels/decode_padded_raw_op.cc) is buggy due to a confusion about pointer arithmetic rules. First, the code computes(https://github.com/tensorflow/tensorflow/blob/1d8903e5b167ed0432077a3db6e462daf781d1fe/tensorflow/core/kernels/decode_padded_raw_op.cc#L61) the width of each output element by dividing the `fixed_length` value to the size of the type argument. The `fixed_length` argument is also used to determine the size needed for the output tensor(https://github.com/tensorflow/tensorflow/blob/1d8903e5b167ed0432077a3db6e462daf781d1fe/tensorflow/core/kernels/decode_padded_raw_op.cc#L63-L79). This is followed by reencoding c

CVSS3: 7.1
0%
Низкий
больше 4 лет назад
debian логотип
CVE-2021-29614

TensorFlow is an end-to-end open source platform for machine learning. ...

CVSS3: 7.1
0%
Низкий
больше 4 лет назад
github логотип
GHSA-8pmx-p244-g88h

Interpreter crash from `tf.io.decode_raw`

CVSS3: 7.1
0%
Низкий
больше 4 лет назад

Уязвимостей на страницу