Google TensorFlow any version

Null pointer dereference in TensorFlow

Integer overflow in Tensorflow

Null pointer dereference in TensorFlow

Memory exhaustion in Tensorflow

Division by zero in TFLite

Segmentation fault in tensorflow-lite

TensorFlow before 1.7.0 has an integer overflow that causes an out-of-bounds read, possibly causing disclosure of the contents of process memory. This occurs in the DecodeBmp feature of the BMP decoder in core/kernels/decode_bmp_op.cc.

NULL pointer dereference in Google TensorFlow before 1.12.2 could cause a denial of service via an invalid GIF file.

`CHECK`-failures in Tensorflow

Reachable Assertion in Tensorflow

Reachable Assertion in Tensorflow

`CHECK`-fails when building invalid tensor shapes in Tensorflow

Google TensorFlow 1.6.x and earlier is affected by: Null Pointer Dereference. The type of exploitation is: context-dependent.

Denial of Service in TensorFlow

Null pointer dereference in tensorflow-lite

Out of bounds access in tensorflow-lite

Heap buffer overflow in Tensorflow

Type confusion leading to `CHECK`-failure based denial of service in TensorFlow

Missing validation causes denial of service via `GetSessionTensor` in TensorFlow

Missing validation causes denial of service in TensorFlow via `Conv3DBackpropFilterV2`

Missing validation crashes `QuantizeAndDequantizeV4Grad` in TensorFlow

Missing validation results in undefined behavior in `SparseTensorDenseAdd` in TensorFlow

Missing validation in `QuantizedConv2D` results in undefined behavior in TensorFlow

Integer overflow in `SpaceToBatchND` in TensorFlow

Missing validation causes denial of service via `DeleteSessionTensor` in TensorFlow

Missing validation causes `TensorSummaryV2` in TensorFlow to crash

Missing validation causes denial of service in TensorFlow via `StagePeek`

Missing validation causes denial of service in TensorFlow via `Conv3DBackpropFilterV2`

Missing validation causes denial of service in TensorFlow via `UnsortedSegmentJoin`

Missing validation causes denial of service in TensorFlow via `SparseTensorToCSRSparseMatrix`

Missing validation causes denial of service in TensorFlow via `LoadAndRemapMatrix`

Missing validation causes denial of service in TensorFlow via `LSTMBlockCell`

Segfault due to missing support for quantized types in TensorFlow

Undefined behavior when users supply invalid resource handles in TensorFlow

Denial of service in TensorFlow due to lack of validation in `tf.ragged.constant`

Core dump when loading TFLite models with quantization in TensorFlow

Crashes due to overflow and `CHECK`-fail in ops with large tensor shapes

Segfault in TensorFlow if `tf.histogram_fixed_width` is called with NaN values

Incomplete validation in signal ops leads to crashes in TensorFlow

CHECK-fail in `QuantizeAndDequantizeV4Grad`