{"data":{"id":"1b27eaba-86cc-4a55-8484-c5feea105f30","title":"CVE-2018-7576: Google TensorFlow 1.6.x and earlier is affected by: Null Pointer Dereference. The type of exploitation is…","summary":"CVE-2018-7576 affects Google TensorFlow 1.6.x and earlier. The flaw is a NULL pointer dereference (CWE-476), and the source describes its exploitation as context-dependent. NIST has not yet provided an NVD assessment.","solution":"The source references the TensorFlow advisory tfsa-2018-002.md and lists a Patch tag, but it does not state a specific fixed version or workaround. N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2018-7576","publishedAt":"2019-04-24T01:29:00.223Z","cveId":"CVE-2018-7576","cweIds":["CWE-476"],"cvssScore":"4.3","cvssSeverity":null,"severity":"medium","attackType":["denial_of_service"],"issueType":"vulnerability","affectedPackages":["tensorflow@>= 1.0.0, < 1.6.0 (fixed: 1.6.0)","tensorflow-gpu@>= 1.0.0, < 1.6.0 (fixed: 1.6.0)"],"affectedPackageNames":["tensorflow","tensorflow-gpu"],"affectedPackageRefs":["pypi:tensorflow","pypi:tensorflow-gpu"],"affectedVendors":["Google"],"affectedVendorsRaw":["TensorFlow"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"Google TensorFlow null pointer dereference","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00457,"epssCheckedAt":"2026-11-04T18:09:14.608Z","kevDateAdded":null,"advisoryAliases":["GHSA-jfq2-rj7f-9gvf"],"affectedPackagesSource":"ghsa","affectedPackagesCheckedAt":"2026-10-10T04:01:13.323Z","patchAvailable":true,"disclosureDate":null,"fixReleasedAt":"2018-03-01T22:56:46.435Z","daysToFix":-419,"fixCheckedAt":"2026-10-29T21:53:01.776Z","capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["availability"],"aiComponentTargeted":"framework","llmSpecific":false,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":null,"fixes":[{"ecosystem":"pypi","name":"tensorflow-gpu","fixedVersion":"1.6.0","matchedVersion":"1.6.0","fixReleasedAt":"2018-03-01T22:59:51.091Z","daysToFix":-419,"match":"ecosystem","source":"registry","status":"found","checkedAt":"2026-10-29T21:53:01.625Z"},{"ecosystem":"pypi","name":"tensorflow","fixedVersion":"1.6.0","matchedVersion":"1.6.0","fixReleasedAt":"2018-03-01T22:56:46.435Z","daysToFix":-419,"match":"ecosystem","source":"tracked","status":"found","checkedAt":"2026-10-29T21:53:01.625Z"}]}}