Количество 3
Количество 3
CVE-2022-29205
TensorFlow is an open source platform for machine learning. Prior to versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4, there is a potential for segfault / denial of service in TensorFlow by calling `tf.compat.v1.*` ops which don't yet have support for quantized types, which was added after migration to TensorFlow 2.x. In these scenarios, since the kernel is missing, a `nullptr` value is passed to `ParseDimensionValue` for the `py_value` argument. Then, this is dereferenced, resulting in segfault. Versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4 contain a patch for this issue.
CVE-2022-29205
TensorFlow is an open source platform for machine learning. Prior to v ...
GHSA-54ch-gjq5-4976
Segfault due to missing support for quantized types
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
CVE-2022-29205 TensorFlow is an open source platform for machine learning. Prior to versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4, there is a potential for segfault / denial of service in TensorFlow by calling `tf.compat.v1.*` ops which don't yet have support for quantized types, which was added after migration to TensorFlow 2.x. In these scenarios, since the kernel is missing, a `nullptr` value is passed to `ParseDimensionValue` for the `py_value` argument. Then, this is dereferenced, resulting in segfault. Versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4 contain a patch for this issue. | CVSS3: 5.5 | 0% Низкий | больше 3 лет назад | |
CVE-2022-29205 TensorFlow is an open source platform for machine learning. Prior to v ... | CVSS3: 5.5 | 0% Низкий | больше 3 лет назад | |
GHSA-54ch-gjq5-4976 Segfault due to missing support for quantized types | CVSS3: 5.5 | 0% Низкий | больше 3 лет назад |
Уязвимостей на страницу