Количество 3
Количество 3
CVE-2022-23557
Tensorflow is an Open Source Machine Learning Framework. An attacker can craft a TFLite model that would trigger a division by zero in `BiasAndClamp` implementation. There is no check that the `bias_size` is non zero. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range.
CVE-2022-23557
Tensorflow is an Open Source Machine Learning Framework. An attacker c ...
GHSA-gf2j-f278-xh4v
Division by zero in TFLite
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2022-23557 Tensorflow is an Open Source Machine Learning Framework. An attacker can craft a TFLite model that would trigger a division by zero in `BiasAndClamp` implementation. There is no check that the `bias_size` is non zero. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range. | CVSS3: 6.5 | 0% Низкий | около 4 лет назад |
| CVE-2022-23557 Tensorflow is an Open Source Machine Learning Framework. An attacker c ... | CVSS3: 6.5 | 0% Низкий | около 4 лет назад |
| GHSA-gf2j-f278-xh4v Division by zero in TFLite | CVSS3: 6.5 | 0% Низкий | почти 4 года назад |
Уязвимостей на страницу