{"data":{"ecosystem":"pypi","name":"tensorflow-gpu","url":"https://aisecwatch.com/packages/pypi/tensorflow-gpu","latestVersion":"2.12.0","firstReleaseAt":"2016-12-19T19:12:20.251Z","repository":"https://github.com/tensorflow/tensorflow/tags","llm":{"exposure":"none","depth":null,"integratedAt":null,"integratedVersion":null,"sdks":[],"path":[]},"authority":{"profile":[],"fromDependencies":[]},"dependencies":[],"advisories":[{"id":"9b7a19b3-924a-4bb7-aaf8-d421457dbe9e","url":"https://aisecwatch.com/issues/9b7a19b3-924a-4bb7-aaf8-d421457dbe9e","cveId":"CVE-2023-33976","title":"CVE-2023-33976: TensorFlow is an end-to-end open source platform for machine learning. `array_ops.upper_bound` causes a segfault when…","headline":null,"severity":"high","publishedAt":"2024-07-31T00:15:03.023Z","affected":["tensorflow@< 2.12.1 (fixed: 2.12.1)","tensorflow-cpu@< 2.12.1 (fixed: 2.12.1)","tensorflow-gpu@< 2.12.1 (fixed: 2.12.1)"],"epssScore":0.00432},{"id":"a04881cb-ff1f-438a-ab3a-e2d19818acde","url":"https://aisecwatch.com/issues/a04881cb-ff1f-438a-ab3a-e2d19818acde","cveId":"CVE-2023-27579","title":"CVE-2023-27579: TensorFlow is an end-to-end open source platform for machine learning. Constructing a tflite model with a paramater…","headline":"TensorFlow tflite filter_input_channel below 1 causes FPE","severity":"high","publishedAt":"2023-03-25T04:15:08.183Z","affected":["tensorflow@< 2.11.1 (fixed: 2.11.1)","tensorflow-cpu@< 2.11.1 (fixed: 2.11.1)","tensorflow-gpu@< 2.11.1 (fixed: 2.11.1)"],"epssScore":0.00394},{"id":"42568107-3c79-47bc-ab09-296270281623","url":"https://aisecwatch.com/issues/42568107-3c79-47bc-ab09-296270281623","cveId":"CVE-2023-25801","title":"CVE-2023-25801: TensorFlow is an open source machine learning platform. Prior to versions 2.12.0 and 2.11.1…","headline":"TensorFlow fractional pooling ops accept unsupported pooling ratios","severity":"high","publishedAt":"2023-03-25T04:15:08.120Z","affected":["tensorflow@< 2.11.1 (fixed: 2.11.1)","tensorflow-cpu@< 2.11.1 (fixed: 2.11.1)","tensorflow-gpu@< 2.11.1 (fixed: 2.11.1)"],"epssScore":0.0015},{"id":"69613b97-ef7e-4563-8d3d-423eb572fd0d","url":"https://aisecwatch.com/issues/69613b97-ef7e-4563-8d3d-423eb572fd0d","cveId":"CVE-2023-25676","title":"CVE-2023-25676: TensorFlow is an open source machine learning platform. When running versions prior to 2.12.0 and 2.11.1 with XLA…","headline":"TensorFlow null pointer dereference in tf.raw_ops.ParallelConcat with XLA","severity":"high","publishedAt":"2023-03-25T04:15:08.057Z","affected":["tensorflow@< 2.11.1 (fixed: 2.11.1)","tensorflow-cpu@< 2.11.1 (fixed: 2.11.1)","tensorflow-gpu@< 2.11.1 (fixed: 2.11.1)"],"epssScore":0.00394},{"id":"1088af0b-2681-49ce-8f2a-232c134d784d","url":"https://aisecwatch.com/issues/1088af0b-2681-49ce-8f2a-232c134d784d","cveId":"CVE-2023-25675","title":"CVE-2023-25675: TensorFlow is an open source machine learning platform. When running versions prior to 2.12.0 and 2.11.1 with XLA…","headline":"TensorFlow segfault in tf.raw_ops.Bincount with mismatched weights under XLA","severity":"high","publishedAt":"2023-03-25T04:15:07.997Z","affected":["tensorflow@< 2.11.1 (fixed: 2.11.1)","tensorflow-cpu@< 2.11.1 (fixed: 2.11.1)","tensorflow-gpu@< 2.11.1 (fixed: 2.11.1)"],"epssScore":0.00394},{"id":"5283f40a-f2e0-4bf4-94c6-924e0ac6184e","url":"https://aisecwatch.com/issues/5283f40a-f2e0-4bf4-94c6-924e0ac6184e","cveId":"CVE-2023-25674","title":"CVE-2023-25674: TensorFlow is an open source machine learning platform. Versions prior to 2.12.0 and 2.11.1 have a null pointer error…","headline":"TensorFlow null pointer dereference in RandomShuffle with XLA enabled","severity":"high","publishedAt":"2023-03-25T04:15:07.937Z","affected":["tensorflow@< 2.11.1 (fixed: 2.11.1)","tensorflow-cpu@< 2.11.1 (fixed: 2.11.1)","tensorflow-gpu@< 2.11.1 (fixed: 2.11.1)"],"epssScore":0.00394},{"id":"ffa33be6-055f-4766-b8ea-ec1ccb011ea9","url":"https://aisecwatch.com/issues/ffa33be6-055f-4766-b8ea-ec1ccb011ea9","cveId":"CVE-2023-25673","title":"CVE-2023-25673: TensorFlow is an open source platform for machine learning. Versions prior to 2.12.0 and 2.11.1 have a Floating Point…","headline":"TensorFlow floating point exception in TensorListSplit with XLA","severity":"high","publishedAt":"2023-03-25T04:15:07.873Z","affected":["tensorflow@< 2.11.1 (fixed: 2.11.1)","tensorflow-cpu@< 2.11.1 (fixed: 2.11.1)","tensorflow-gpu@< 2.11.1 (fixed: 2.11.1)"],"epssScore":0.00394},{"id":"770cc688-cf36-49d3-b38f-5cc64cb58323","url":"https://aisecwatch.com/issues/770cc688-cf36-49d3-b38f-5cc64cb58323","cveId":"CVE-2023-25672","title":"CVE-2023-25672: TensorFlow is an open source platform for machine learning. The function `tf.raw_ops.LookupTableImportV2` cannot handle…","headline":"TensorFlow LookupTableImportV2 null pointer dereference on scalar values","severity":"high","publishedAt":"2023-03-25T04:15:07.817Z","affected":["tensorflow@< 2.11.1 (fixed: 2.11.1)","tensorflow-cpu@< 2.11.1 (fixed: 2.11.1)","tensorflow-gpu@< 2.11.1 (fixed: 2.11.1)"],"epssScore":0.00361},{"id":"4c93f3e9-464d-4165-a887-4679d5efa9aa","url":"https://aisecwatch.com/issues/4c93f3e9-464d-4165-a887-4679d5efa9aa","cveId":"CVE-2023-25670","title":"CVE-2023-25670: TensorFlow is an open source platform for machine learning. Versions prior to 2.12.0 and 2.11.1 have a null point error…","headline":"TensorFlow null pointer dereference in QuantizedMatMulWithBiasAndDequantize","severity":"high","publishedAt":"2023-03-25T04:15:07.710Z","affected":["tensorflow@< 2.11.1 (fixed: 2.11.1)","tensorflow-cpu@< 2.11.1 (fixed: 2.11.1)","tensorflow-gpu@< 2.11.1 (fixed: 2.11.1)"],"epssScore":0.00394},{"id":"ec68cdf1-8344-45a6-8c21-12904cb5f96c","url":"https://aisecwatch.com/issues/ec68cdf1-8344-45a6-8c21-12904cb5f96c","cveId":"CVE-2023-25669","title":"CVE-2023-25669: TensorFlow is an open source platform for machine learning. Prior to versions 2.12.0 and 2.11.1, if the stride and…","headline":"TensorFlow AvgPoolGrad floating point exception from bad stride","severity":"high","publishedAt":"2023-03-25T04:15:07.653Z","affected":["tensorflow@< 2.11.1 (fixed: 2.11.1)","tensorflow-cpu@< 2.11.1 (fixed: 2.11.1)","tensorflow-gpu@< 2.11.1 (fixed: 2.11.1)"],"epssScore":0.00394},{"id":"f61d96a8-ef92-461e-80ef-4942229a69ee","url":"https://aisecwatch.com/issues/f61d96a8-ef92-461e-80ef-4942229a69ee","cveId":"CVE-2023-25668","title":"CVE-2023-25668: TensorFlow is an open source platform for machine learning. Attackers using Tensorflow prior to 2.12.0 or 2.11.1 can…","headline":"TensorFlow heap memory access leading to crash or code execution","severity":"critical","publishedAt":"2023-03-25T04:15:07.593Z","affected":["tensorflow@< 2.11.1 (fixed: 2.11.1)","tensorflow-cpu@< 2.11.1 (fixed: 2.11.1)","tensorflow-gpu@< 2.11.1 (fixed: 2.11.1)"],"epssScore":0.00838},{"id":"2ebfba43-8d1f-4966-a8fd-8a71f41ee33f","url":"https://aisecwatch.com/issues/2ebfba43-8d1f-4966-a8fd-8a71f41ee33f","cveId":"CVE-2023-25667","title":"CVE-2023-25667: TensorFlow is an open source platform for machine learning. Prior to versions 2.12.0 and 2.11.1, integer overflow…","headline":"TensorFlow integer overflow in frame, height, width and channel calculation","severity":"medium","publishedAt":"2023-03-25T04:15:07.537Z","affected":["tensorflow@< 2.11.1 (fixed: 2.11.1)","tensorflow-cpu@< 2.11.1 (fixed: 2.11.1)","tensorflow-gpu@< 2.11.1 (fixed: 2.11.1)"],"epssScore":0.00308},{"id":"b65ddd42-7f88-4a5a-80d7-0a4aaab0cb3e","url":"https://aisecwatch.com/issues/b65ddd42-7f88-4a5a-80d7-0a4aaab0cb3e","cveId":"CVE-2023-25666","title":"CVE-2023-25666: TensorFlow is an open source platform for machine learning. Prior to versions 2.12.0 and 2.11.1, there is a floating…","headline":"TensorFlow floating point exception in AudioSpectrogram","severity":"high","publishedAt":"2023-03-25T04:15:07.480Z","affected":["tensorflow@< 2.11.1 (fixed: 2.11.1)","tensorflow-cpu@< 2.11.1 (fixed: 2.11.1)","tensorflow-gpu@< 2.11.1 (fixed: 2.11.1)"],"epssScore":0.00387},{"id":"6bbdbc29-ef6c-4d8a-afdb-ccc590af0aec","url":"https://aisecwatch.com/issues/6bbdbc29-ef6c-4d8a-afdb-ccc590af0aec","cveId":"CVE-2023-25665","title":"CVE-2023-25665: TensorFlow is an open source platform for machine learning. Prior to versions 2.12.0 and 2.11.1, when…","headline":"TensorFlow null pointer dereference in SparseSparseMaximum","severity":"high","publishedAt":"2023-03-25T04:15:07.427Z","affected":["tensorflow@< 2.11.1 (fixed: 2.11.1)","tensorflow-cpu@< 2.11.1 (fixed: 2.11.1)","tensorflow-gpu@< 2.11.1 (fixed: 2.11.1)"],"epssScore":0.00443},{"id":"a89cdc7e-5e14-4152-bc81-5822da57947f","url":"https://aisecwatch.com/issues/a89cdc7e-5e14-4152-bc81-5822da57947f","cveId":"CVE-2023-25663","title":"CVE-2023-25663: TensorFlow is an open source platform for machine learning. Prior to versions 2.12.0 and 2.11.1, when…","headline":"TensorFlow null pointer dereference in Lookup function","severity":"high","publishedAt":"2023-03-25T04:15:07.313Z","affected":["tensorflow@< 2.11.1 (fixed: 2.11.1)","tensorflow-cpu@< 2.11.1 (fixed: 2.11.1)","tensorflow-gpu@< 2.11.1 (fixed: 2.11.1)"],"epssScore":0.00394},{"id":"0f0a7d56-3af9-4808-97e4-954e1a949763","url":"https://aisecwatch.com/issues/0f0a7d56-3af9-4808-97e4-954e1a949763","cveId":"CVE-2023-25662","title":"CVE-2023-25662: TensorFlow is an open source platform for machine learning. Versions prior to 2.12.0 and 2.11.1 are vulnerable to…","headline":"TensorFlow integer overflow in EditDistance","severity":"high","publishedAt":"2023-03-25T04:15:07.260Z","affected":["tensorflow@< 2.11.1 (fixed: 2.11.1)","tensorflow-cpu@< 2.11.1 (fixed: 2.11.1)","tensorflow-gpu@< 2.11.1 (fixed: 2.11.1)"],"epssScore":0.00394},{"id":"937c7e18-57a6-4913-9d19-1230a69440df","url":"https://aisecwatch.com/issues/937c7e18-57a6-4913-9d19-1230a69440df","cveId":"CVE-2023-25660","title":"CVE-2023-25660: TensorFlow is an open source platform for machine learning. Prior to versions 2.12.0 and 2.11.1, when the parameter…","headline":"TensorFlow null pointer dereference in tf.raw_ops.Print","severity":"high","publishedAt":"2023-03-25T04:15:07.200Z","affected":["tensorflow@< 2.11.1 (fixed: 2.11.1)","tensorflow-cpu@< 2.11.1 (fixed: 2.11.1)","tensorflow-gpu@< 2.11.1 (fixed: 2.11.1)"],"epssScore":0.00394},{"id":"719dc230-2aba-441c-98cd-416d2c4a7359","url":"https://aisecwatch.com/issues/719dc230-2aba-441c-98cd-416d2c4a7359","cveId":"CVE-2023-25659","title":"CVE-2023-25659: TensorFlow is an open source platform for machine learning. Prior to versions 2.12.0 and 2.11.1, if the parameter…","headline":"TensorFlow DynamicStitch out-of-bounds read via mismatched shapes","severity":"high","publishedAt":"2023-03-25T04:15:07.143Z","affected":["tensorflow@< 2.11.1 (fixed: 2.11.1)","tensorflow-cpu@< 2.11.1 (fixed: 2.11.1)","tensorflow-gpu@< 2.11.1 (fixed: 2.11.1)"],"epssScore":0.00394},{"id":"3664e5ca-9433-446a-bfdd-0bb6a0bdf62a","url":"https://aisecwatch.com/issues/3664e5ca-9433-446a-bfdd-0bb6a0bdf62a","cveId":"CVE-2023-25658","title":"CVE-2023-25658: TensorFlow is an open source platform for machine learning. Prior to versions 2.12.0 and 2.11.1, an out of bounds read…","headline":"TensorFlow out-of-bounds read in GRUBlockCellGrad","severity":"high","publishedAt":"2023-03-25T04:15:07.077Z","affected":["tensorflow@< 2.11.1 (fixed: 2.11.1)","tensorflow-cpu@< 2.11.1 (fixed: 2.11.1)","tensorflow-gpu@< 2.11.1 (fixed: 2.11.1)"],"epssScore":0.00387},{"id":"c5ff18ea-a3ab-481d-85da-63d7ad15ed35","url":"https://aisecwatch.com/issues/c5ff18ea-a3ab-481d-85da-63d7ad15ed35","cveId":"CVE-2022-41910","title":"CVE-2022-41910: TensorFlow is an open source platform for machine learning. The function MakeGrapplerFunctionItem takes arguments that…","headline":"TensorFlow out-of-bounds read in MakeGrapplerFunctionItem via input sizes","severity":"medium","publishedAt":"2022-12-07T03:15:10.587Z","affected":["tensorflow@< 2.8.4 (fixed: 2.8.4)","tensorflow@>= 2.9.0, < 2.9.3 (fixed: 2.9.3)","tensorflow@>= 2.10.0, < 2.10.1 (fixed: 2.10.1)","tensorflow-cpu@< 2.8.4 (fixed: 2.8.4)","tensorflow-gpu@< 2.8.4 (fixed: 2.8.4)","tensorflow-cpu@>= 2.9.0, < 2.9.3 (fixed: 2.9.3)","tensorflow-gpu@>= 2.9.0, < 2.9.3 (fixed: 2.9.3)","tensorflow-cpu@>= 2.10.0, < 2.10.1 (fixed: 2.10.1)","tensorflow-gpu@>= 2.10.0, < 2.10.1 (fixed: 2.10.1)"],"epssScore":0.00439},{"id":"0a00bbe6-694f-4045-889c-6f82103a5e3d","url":"https://aisecwatch.com/issues/0a00bbe6-694f-4045-889c-6f82103a5e3d","cveId":"CVE-2022-41902","title":"CVE-2022-41902: TensorFlow is an open source platform for machine learning. The function MakeGrapplerFunctionItem takes arguments that…","headline":"TensorFlow out-of-bounds memory read via MakeGrapplerFunctionItem","severity":"high","publishedAt":"2022-12-07T03:15:10.513Z","affected":["tensorflow@< 2.8.4 (fixed: 2.8.4)","tensorflow@>= 2.9.0, < 2.9.3 (fixed: 2.9.3)","tensorflow@>= 2.10.0, < 2.10.1 (fixed: 2.10.1)","tensorflow-cpu@< 2.8.4 (fixed: 2.8.4)","tensorflow-gpu@< 2.8.4 (fixed: 2.8.4)","tensorflow-cpu@>= 2.9.0, < 2.9.3 (fixed: 2.9.3)","tensorflow-gpu@>= 2.9.0, < 2.9.3 (fixed: 2.9.3)","tensorflow-cpu@>= 2.10.0, < 2.10.1 (fixed: 2.10.1)","tensorflow-gpu@>= 2.10.0, < 2.10.1 (fixed: 2.10.1)"],"epssScore":0.00492},{"id":"da060b8d-2a3d-4eae-8757-acb862e09d2e","url":"https://aisecwatch.com/issues/da060b8d-2a3d-4eae-8757-acb862e09d2e","cveId":"CVE-2022-41911","title":"CVE-2022-41911: TensorFlow is an open source platform for machine learning. When printing a tensor, we get it's data as a `const char*`…","headline":"TensorFlow tensor printing undefined behavior from invalid bool conversion","severity":"medium","publishedAt":"2022-11-19T03:15:22.743Z","affected":["tensorflow@< 2.8.4 (fixed: 2.8.4)","tensorflow-cpu@>= 2.9.0, < 2.9.3 (fixed: 2.9.3)","tensorflow-gpu@>= 2.10.0, < 2.10.1 (fixed: 2.10.1)","tensorflow@>= 2.9.0, < 2.9.3 (fixed: 2.9.3)","tensorflow@>= 2.10.0, < 2.10.1 (fixed: 2.10.1)","tensorflow-cpu@< 2.8.4 (fixed: 2.8.4)","tensorflow-gpu@< 2.8.4 (fixed: 2.8.4)","tensorflow-gpu@>= 2.9.0, < 2.9.3 (fixed: 2.9.3)","tensorflow-cpu@>= 2.10.0, < 2.10.1 (fixed: 2.10.1)"],"epssScore":0.00426},{"id":"f4ebb9cf-4ec5-4cdb-b7fc-a4f8b5252d75","url":"https://aisecwatch.com/issues/f4ebb9cf-4ec5-4cdb-b7fc-a4f8b5252d75","cveId":"CVE-2022-41909","title":"CVE-2022-41909: TensorFlow is an open source platform for machine learning. An input `encoded` that is not a valid…","headline":"TensorFlow segfault in CompositeTensorVariantToComponents via invalid input","severity":"medium","publishedAt":"2022-11-19T03:15:22.223Z","affected":["tensorflow@< 2.8.4 (fixed: 2.8.4)","tensorflow@>= 2.9.0, < 2.9.3 (fixed: 2.9.3)","tensorflow@>= 2.10.0, < 2.10.1 (fixed: 2.10.1)","tensorflow-cpu@< 2.8.4 (fixed: 2.8.4)","tensorflow-gpu@< 2.8.4 (fixed: 2.8.4)","tensorflow-cpu@>= 2.9.0, < 2.9.3 (fixed: 2.9.3)","tensorflow-gpu@>= 2.9.0, < 2.9.3 (fixed: 2.9.3)","tensorflow-cpu@>= 2.10.0, < 2.10.1 (fixed: 2.10.1)","tensorflow-gpu@>= 2.10.0, < 2.10.1 (fixed: 2.10.1)"],"epssScore":0.00527},{"id":"11b1df8e-df41-4cc9-927b-312635cb3e49","url":"https://aisecwatch.com/issues/11b1df8e-df41-4cc9-927b-312635cb3e49","cveId":"CVE-2022-41908","title":"CVE-2022-41908: TensorFlow is an open source platform for machine learning. An input `token` that is not a UTF-8 bytestring will…","headline":null,"severity":"medium","publishedAt":"2022-11-19T03:15:21.790Z","affected":["tensorflow@< 2.8.4 (fixed: 2.8.4)","tensorflow@>= 2.9.0, < 2.9.3 (fixed: 2.9.3)","tensorflow@>= 2.10.0, < 2.10.1 (fixed: 2.10.1)","tensorflow-cpu@< 2.8.4 (fixed: 2.8.4)","tensorflow-gpu@< 2.8.4 (fixed: 2.8.4)","tensorflow-cpu@>= 2.9.0, < 2.9.3 (fixed: 2.9.3)","tensorflow-gpu@>= 2.9.0, < 2.9.3 (fixed: 2.9.3)","tensorflow-cpu@>= 2.10.0, < 2.10.1 (fixed: 2.10.1)","tensorflow-gpu@>= 2.10.0, < 2.10.1 (fixed: 2.10.1)"],"epssScore":0.00484},{"id":"5658ad43-a090-45e2-a53a-d3e5b21aae19","url":"https://aisecwatch.com/issues/5658ad43-a090-45e2-a53a-d3e5b21aae19","cveId":"CVE-2022-41907","title":"CVE-2022-41907: TensorFlow is an open source platform for machine learning. When `tf.raw_ops.ResizeNearestNeighborGrad` is given a…","headline":"TensorFlow integer overflow in ResizeNearestNeighborGrad via large size input","severity":"medium","publishedAt":"2022-11-19T03:15:21.277Z","affected":["tensorflow@< 2.8.4 (fixed: 2.8.4)","tensorflow@>= 2.9.0, < 2.9.3 (fixed: 2.9.3)","tensorflow@>= 2.10.0, < 2.10.1 (fixed: 2.10.1)","tensorflow-cpu@< 2.8.4 (fixed: 2.8.4)","tensorflow-gpu@< 2.8.4 (fixed: 2.8.4)","tensorflow-cpu@>= 2.9.0, < 2.9.3 (fixed: 2.9.3)","tensorflow-gpu@>= 2.9.0, < 2.9.3 (fixed: 2.9.3)","tensorflow-cpu@>= 2.10.0, < 2.10.1 (fixed: 2.10.1)","tensorflow-gpu@>= 2.10.0, < 2.10.1 (fixed: 2.10.1)"],"epssScore":0.00474},{"id":"3dd40cbc-1d72-44af-b77f-93e74dc1f9a3","url":"https://aisecwatch.com/issues/3dd40cbc-1d72-44af-b77f-93e74dc1f9a3","cveId":"CVE-2022-41901","title":"CVE-2022-41901: TensorFlow is an open source platform for machine learning. An input `sparse_matrix` that is not a matrix with a shape…","headline":"TensorFlow sparse matrix input validation flaw in tf.raw_ops.SparseMatrixNNZ","severity":"medium","publishedAt":"2022-11-19T03:15:20.907Z","affected":["tensorflow@< 2.8.4 (fixed: 2.8.4)","tensorflow@>= 2.9.0, < 2.9.3 (fixed: 2.9.3)","tensorflow@>= 2.10.0, < 2.10.1 (fixed: 2.10.1)","tensorflow-cpu@< 2.8.4 (fixed: 2.8.4)","tensorflow-gpu@< 2.8.4 (fixed: 2.8.4)","tensorflow-cpu@>= 2.9.0, < 2.9.3 (fixed: 2.9.3)","tensorflow-gpu@>= 2.9.0, < 2.9.3 (fixed: 2.9.3)","tensorflow-cpu@>= 2.10.0, < 2.10.1 (fixed: 2.10.1)","tensorflow-gpu@>= 2.10.0, < 2.10.1 (fixed: 2.10.1)"],"epssScore":0.00474},{"id":"74548612-65d5-442c-95ab-ea1399a9e332","url":"https://aisecwatch.com/issues/74548612-65d5-442c-95ab-ea1399a9e332","cveId":"CVE-2022-41900","title":"CVE-2022-41900: TensorFlow is an open source platform for machine learning. The security vulnerability results in…","headline":"TensorFlow heap access via FractionalMax(AVG)Pool illegal ratio","severity":"high","publishedAt":"2022-11-19T03:15:20.273Z","affected":["tensorflow@< 2.8.4 (fixed: 2.8.4)","tensorflow@>= 2.9.0, < 2.9.3 (fixed: 2.9.3)","tensorflow@>= 2.10.0, < 2.10.1 (fixed: 2.10.1)","tensorflow-cpu@< 2.8.4 (fixed: 2.8.4)","tensorflow-gpu@< 2.8.4 (fixed: 2.8.4)","tensorflow-cpu@>= 2.9.0, < 2.9.3 (fixed: 2.9.3)","tensorflow-gpu@>= 2.9.0, < 2.9.3 (fixed: 2.9.3)","tensorflow-cpu@>= 2.10.0, < 2.10.1 (fixed: 2.10.1)","tensorflow-gpu@>= 2.10.0, < 2.10.1 (fixed: 2.10.1)"],"epssScore":0.00631},{"id":"1d63e3d3-8136-49df-8848-ace17fb0ad27","url":"https://aisecwatch.com/issues/1d63e3d3-8136-49df-8848-ace17fb0ad27","cveId":"CVE-2022-41899","title":"CVE-2022-41899: TensorFlow is an open source platform for machine learning. Inputs `dense_features` or `example_state_data` not of rank…","headline":"TensorFlow SdcaOptimizer assertion failure from rank-invalid dense_features","severity":"medium","publishedAt":"2022-11-19T03:15:19.817Z","affected":["tensorflow@< 2.8.4 (fixed: 2.8.4)","tensorflow@>= 2.9.0, < 2.9.3 (fixed: 2.9.3)","tensorflow@>= 2.10.0, < 2.10.1 (fixed: 2.10.1)","tensorflow-cpu@< 2.8.4 (fixed: 2.8.4)","tensorflow-gpu@< 2.8.4 (fixed: 2.8.4)","tensorflow-cpu@>= 2.9.0, < 2.9.3 (fixed: 2.9.3)","tensorflow-gpu@>= 2.9.0, < 2.9.3 (fixed: 2.9.3)","tensorflow-cpu@>= 2.10.0, < 2.10.1 (fixed: 2.10.1)","tensorflow-gpu@>= 2.10.0, < 2.10.1 (fixed: 2.10.1)"],"epssScore":0.00474},{"id":"32644472-8c2d-4422-a97b-b830d20f9124","url":"https://aisecwatch.com/issues/32644472-8c2d-4422-a97b-b830d20f9124","cveId":"CVE-2022-41898","title":"CVE-2022-41898: TensorFlow is an open source platform for machine learning. If `SparseFillEmptyRowsGrad` is given empty inputs…","headline":"TensorFlow crash in SparseFillEmptyRowsGrad with empty inputs","severity":"medium","publishedAt":"2022-11-19T03:15:19.420Z","affected":["tensorflow@< 2.8.4 (fixed: 2.8.4)","tensorflow@>= 2.9.0, < 2.9.3 (fixed: 2.9.3)","tensorflow@>= 2.10.0, < 2.10.1 (fixed: 2.10.1)","tensorflow-cpu@< 2.8.4 (fixed: 2.8.4)","tensorflow-gpu@< 2.8.4 (fixed: 2.8.4)","tensorflow-cpu@>= 2.9.0, < 2.9.3 (fixed: 2.9.3)","tensorflow-gpu@>= 2.9.0, < 2.9.3 (fixed: 2.9.3)","tensorflow-cpu@>= 2.10.0, < 2.10.1 (fixed: 2.10.1)","tensorflow-gpu@>= 2.10.0, < 2.10.1 (fixed: 2.10.1)"],"epssScore":0.00474},{"id":"831e07ef-1883-49fa-b9f1-b3f43bc8fa2e","url":"https://aisecwatch.com/issues/831e07ef-1883-49fa-b9f1-b3f43bc8fa2e","cveId":"CVE-2022-41897","title":"CVE-2022-41897: TensorFlow is an open source platform for machine learning. If `FractionMaxPoolGrad` is given outsize inputs…","headline":"TensorFlow crash in FractionMaxPoolGrad with oversized pooling sequence inputs","severity":"medium","publishedAt":"2022-11-19T03:15:19.060Z","affected":["tensorflow@< 2.8.4 (fixed: 2.8.4)","tensorflow@>= 2.9.0, < 2.9.3 (fixed: 2.9.3)","tensorflow@>= 2.10.0, < 2.10.1 (fixed: 2.10.1)","tensorflow-cpu@< 2.8.4 (fixed: 2.8.4)","tensorflow-gpu@< 2.8.4 (fixed: 2.8.4)","tensorflow-cpu@>= 2.9.0, < 2.9.3 (fixed: 2.9.3)","tensorflow-gpu@>= 2.9.0, < 2.9.3 (fixed: 2.9.3)","tensorflow-cpu@>= 2.10.0, < 2.10.1 (fixed: 2.10.1)","tensorflow-gpu@>= 2.10.0, < 2.10.1 (fixed: 2.10.1)"],"epssScore":0.00474},{"id":"0a143935-9896-4b12-a8eb-3f15ad0b0c79","url":"https://aisecwatch.com/issues/0a143935-9896-4b12-a8eb-3f15ad0b0c79","cveId":"CVE-2022-41896","title":"CVE-2022-41896: TensorFlow is an open source platform for machine learning. If `ThreadUnsafeUnigramCandidateSampler` is given input…","headline":"TensorFlow crash in ThreadUnsafeUnigramCandidateSampler via oversized","severity":"medium","publishedAt":"2022-11-19T03:15:18.590Z","affected":["tensorflow@< 2.8.4 (fixed: 2.8.4)","tensorflow@>= 2.9.0, < 2.9.3 (fixed: 2.9.3)","tensorflow@>= 2.10.0, < 2.10.1 (fixed: 2.10.1)","tensorflow-cpu@< 2.8.4 (fixed: 2.8.4)","tensorflow-gpu@< 2.8.4 (fixed: 2.8.4)","tensorflow-cpu@>= 2.9.0, < 2.9.3 (fixed: 2.9.3)","tensorflow-gpu@>= 2.9.0, < 2.9.3 (fixed: 2.9.3)","tensorflow-cpu@>= 2.10.0, < 2.10.1 (fixed: 2.10.1)","tensorflow-gpu@>= 2.10.0, < 2.10.1 (fixed: 2.10.1)"],"epssScore":0.00474},{"id":"8ca308b4-079f-420c-96fa-d5f431cb79ae","url":"https://aisecwatch.com/issues/8ca308b4-079f-420c-96fa-d5f431cb79ae","cveId":"CVE-2022-41895","title":"CVE-2022-41895: TensorFlow is an open source platform for machine learning. If `MirrorPadGrad` is given outsize input `paddings`…","headline":"TensorFlow heap out-of-bounds error in MirrorPadGrad via outsize paddings input","severity":"medium","publishedAt":"2022-11-19T03:15:18.107Z","affected":["tensorflow@< 2.8.4 (fixed: 2.8.4)","tensorflow@>= 2.9.0, < 2.9.3 (fixed: 2.9.3)","tensorflow@>= 2.10.0, < 2.10.1 (fixed: 2.10.1)","tensorflow-cpu@< 2.8.4 (fixed: 2.8.4)","tensorflow-gpu@< 2.8.4 (fixed: 2.8.4)","tensorflow-cpu@>= 2.9.0, < 2.9.3 (fixed: 2.9.3)","tensorflow-gpu@>= 2.9.0, < 2.9.3 (fixed: 2.9.3)","tensorflow-cpu@>= 2.10.0, < 2.10.1 (fixed: 2.10.1)","tensorflow-gpu@>= 2.10.0, < 2.10.1 (fixed: 2.10.1)"],"epssScore":0.00474},{"id":"82558dd6-f421-4afb-bd18-6514e56dfcb6","url":"https://aisecwatch.com/issues/82558dd6-f421-4afb-bd18-6514e56dfcb6","cveId":"CVE-2022-41893","title":"CVE-2022-41893: TensorFlow is an open source platform for machine learning. If `tf.raw_ops.TensorListResize` is given a nonscalar value…","headline":"TensorFlow denial of service through nonscalar size in TensorListResize","severity":"medium","publishedAt":"2022-11-19T03:15:17.070Z","affected":["tensorflow@< 2.8.4 (fixed: 2.8.4)","tensorflow@>= 2.9.0, < 2.9.3 (fixed: 2.9.3)","tensorflow@>= 2.10.0, < 2.10.1 (fixed: 2.10.1)","tensorflow-cpu@< 2.8.4 (fixed: 2.8.4)","tensorflow-gpu@< 2.8.4 (fixed: 2.8.4)","tensorflow-cpu@>= 2.9.0, < 2.9.3 (fixed: 2.9.3)","tensorflow-gpu@>= 2.9.0, < 2.9.3 (fixed: 2.9.3)","tensorflow-cpu@>= 2.10.0, < 2.10.1 (fixed: 2.10.1)","tensorflow-gpu@>= 2.10.0, < 2.10.1 (fixed: 2.10.1)"],"epssScore":0.00473},{"id":"d9b6d5e5-0a92-4b91-b9fc-4633eddf1b6e","url":"https://aisecwatch.com/issues/d9b6d5e5-0a92-4b91-b9fc-4633eddf1b6e","cveId":"CVE-2022-41891","title":"CVE-2022-41891: TensorFlow is an open source platform for machine learning. If `tf.raw_ops.TensorListConcat` is given…","headline":"TensorFlow segmentation fault in TensorListConcat via empty element_shape","severity":"medium","publishedAt":"2022-11-19T03:15:16.657Z","affected":["tensorflow@< 2.8.4 (fixed: 2.8.4)","tensorflow@>= 2.9.0, < 2.9.3 (fixed: 2.9.3)","tensorflow@>= 2.10.0, < 2.10.1 (fixed: 2.10.1)","tensorflow-cpu@< 2.8.4 (fixed: 2.8.4)","tensorflow-gpu@< 2.8.4 (fixed: 2.8.4)","tensorflow-cpu@>= 2.9.0, < 2.9.3 (fixed: 2.9.3)","tensorflow-gpu@>= 2.9.0, < 2.9.3 (fixed: 2.9.3)","tensorflow-cpu@>= 2.10.0, < 2.10.1 (fixed: 2.10.1)","tensorflow-gpu@>= 2.10.0, < 2.10.1 (fixed: 2.10.1)"],"epssScore":0.00463},{"id":"86ea389d-d510-43f8-90d5-365fe35dd1db","url":"https://aisecwatch.com/issues/86ea389d-d510-43f8-90d5-365fe35dd1db","cveId":"CVE-2022-41890","title":"CVE-2022-41890: TensorFlow is an open source platform for machine learning. If `BCast::ToShape` is given input larger than an `int32`…","headline":"TensorFlow crash in BCast::ToShape with input larger than int32","severity":"medium","publishedAt":"2022-11-19T03:15:16.160Z","affected":["tensorflow@< 2.8.4 (fixed: 2.8.4)","tensorflow@>= 2.9.0, < 2.9.3 (fixed: 2.9.3)","tensorflow@>= 2.10.0, < 2.10.1 (fixed: 2.10.1)","tensorflow-cpu@< 2.8.4 (fixed: 2.8.4)","tensorflow-gpu@< 2.8.4 (fixed: 2.8.4)","tensorflow-cpu@>= 2.9.0, < 2.9.3 (fixed: 2.9.3)","tensorflow-gpu@>= 2.9.0, < 2.9.3 (fixed: 2.9.3)","tensorflow-cpu@>= 2.10.0, < 2.10.1 (fixed: 2.10.1)","tensorflow-gpu@>= 2.10.0, < 2.10.1 (fixed: 2.10.1)"],"epssScore":0.00473},{"id":"ef419cbd-2638-4bc0-af35-4ca414bc6b7d","url":"https://aisecwatch.com/issues/ef419cbd-2638-4bc0-af35-4ca414bc6b7d","cveId":"CVE-2022-41889","title":"CVE-2022-41889: TensorFlow is an open source platform for machine learning. If a list of quantized tensors is assigned to an attribute…","headline":"TensorFlow null pointer dereference in quantized tensor list assignment","severity":"medium","publishedAt":"2022-11-19T03:15:15.667Z","affected":["tensorflow@< 2.8.4 (fixed: 2.8.4)","tensorflow@>= 2.9.0, < 2.9.3 (fixed: 2.9.3)","tensorflow@>= 2.10.0, < 2.10.1 (fixed: 2.10.1)","tensorflow-cpu@< 2.8.4 (fixed: 2.8.4)","tensorflow-gpu@< 2.8.4 (fixed: 2.8.4)","tensorflow-cpu@>= 2.9.0, < 2.9.3 (fixed: 2.9.3)","tensorflow-gpu@>= 2.9.0, < 2.9.3 (fixed: 2.9.3)","tensorflow-cpu@>= 2.10.0, < 2.10.1 (fixed: 2.10.1)","tensorflow-gpu@>= 2.10.0, < 2.10.1 (fixed: 2.10.1)"],"epssScore":0.00435},{"id":"5095d67e-9614-47e0-8909-3ef91e3e155b","url":"https://aisecwatch.com/issues/5095d67e-9614-47e0-8909-3ef91e3e155b","cveId":"CVE-2022-41888","title":"CVE-2022-41888: TensorFlow is an open source platform for machine learning. When running on GPU…","headline":"TensorFlow missing rank check on scores input in generate_bounding_box_proposals","severity":"medium","publishedAt":"2022-11-19T03:15:15.203Z","affected":["tensorflow@< 2.8.4 (fixed: 2.8.4)","tensorflow@>= 2.9.0, < 2.9.3 (fixed: 2.9.3)","tensorflow@>= 2.10.0, < 2.10.1 (fixed: 2.10.1)","tensorflow-cpu@< 2.8.4 (fixed: 2.8.4)","tensorflow-gpu@< 2.8.4 (fixed: 2.8.4)","tensorflow-cpu@>= 2.9.0, < 2.9.3 (fixed: 2.9.3)","tensorflow-gpu@>= 2.9.0, < 2.9.3 (fixed: 2.9.3)","tensorflow-cpu@>= 2.10.0, < 2.10.1 (fixed: 2.10.1)","tensorflow-gpu@>= 2.10.0, < 2.10.1 (fixed: 2.10.1)"],"epssScore":0.00473},{"id":"f1a39291-d875-44fa-ae51-9f98d9ab4e62","url":"https://aisecwatch.com/issues/f1a39291-d875-44fa-ae51-9f98d9ab4e62","cveId":"CVE-2022-41887","title":"CVE-2022-41887: TensorFlow is an open source platform for machine learning. `tf.keras.losses.poisson` receives a `y_pred` and `y_true`…","headline":"TensorFlow crash from integer overflow in tf.keras.losses.poisson","severity":"medium","publishedAt":"2022-11-19T03:15:14.817Z","affected":["tensorflow@< 2.9.3 (fixed: 2.9.3)","tensorflow@>= 2.10.0, < 2.10.1 (fixed: 2.10.1)","tensorflow-cpu@< 2.9.3 (fixed: 2.9.3)","tensorflow-gpu@< 2.9.3 (fixed: 2.9.3)","tensorflow-cpu@>= 2.10.0, < 2.10.1 (fixed: 2.10.1)","tensorflow-gpu@>= 2.10.0, < 2.10.1 (fixed: 2.10.1)"],"epssScore":0.00474},{"id":"408158e3-7cc3-46c3-8251-314a61da18c9","url":"https://aisecwatch.com/issues/408158e3-7cc3-46c3-8251-314a61da18c9","cveId":"CVE-2022-41886","title":"CVE-2022-41886: TensorFlow is an open source platform for machine learning. When `tf.raw_ops.ImageProjectiveTransformV2` is given a…","headline":"TensorFlow buffer overflow in ImageProjectiveTransformV2","severity":"medium","publishedAt":"2022-11-19T03:15:14.553Z","affected":["tensorflow@< 2.8.4 (fixed: 2.8.4)","tensorflow@>= 2.9.0, < 2.9.3 (fixed: 2.9.3)","tensorflow@>= 2.10.0, < 2.10.1 (fixed: 2.10.1)","tensorflow-cpu@< 2.8.4 (fixed: 2.8.4)","tensorflow-gpu@< 2.8.4 (fixed: 2.8.4)","tensorflow-cpu@>= 2.9.0, < 2.9.3 (fixed: 2.9.3)","tensorflow-gpu@>= 2.9.0, < 2.9.3 (fixed: 2.9.3)","tensorflow-cpu@>= 2.10.0, < 2.10.1 (fixed: 2.10.1)","tensorflow-gpu@>= 2.10.0, < 2.10.1 (fixed: 2.10.1)"],"epssScore":0.00463},{"id":"c6fa16ea-d38c-4292-b9d6-27b03bbe1e14","url":"https://aisecwatch.com/issues/c6fa16ea-d38c-4292-b9d6-27b03bbe1e14","cveId":"CVE-2022-41885","title":"CVE-2022-41885: TensorFlow is an open source platform for machine learning. When `tf.raw_ops.FusedResizeAndPadConv2D` is given a large…","headline":"TensorFlow buffer overflow in tf.raw_ops.FusedResizeAndPadConv2D","severity":"medium","publishedAt":"2022-11-19T03:15:14.147Z","affected":["tensorflow@< 2.7.4 (fixed: 2.7.4)","tensorflow@>= 2.8.0, < 2.8.1 (fixed: 2.8.1)","tensorflow@>= 2.9.0, < 2.9.1 (fixed: 2.9.1)","tensorflow-cpu@< 2.7.4 (fixed: 2.7.4)","tensorflow-gpu@< 2.7.4 (fixed: 2.7.4)","tensorflow-cpu@>= 2.8.0, < 2.8.1 (fixed: 2.8.1)","tensorflow-gpu@>= 2.8.0, < 2.8.1 (fixed: 2.8.1)","tensorflow-cpu@>= 2.9.0, < 2.9.1 (fixed: 2.9.1)","tensorflow-gpu@>= 2.9.0, < 2.9.1 (fixed: 2.9.1)"],"epssScore":0.00463},{"id":"6c5229e3-c23b-494f-8d89-3cfee41a5687","url":"https://aisecwatch.com/issues/6c5229e3-c23b-494f-8d89-3cfee41a5687","cveId":"CVE-2022-41884","title":"CVE-2022-41884: TensorFlow is an open source platform for machine learning. If a numpy array is created with a shape such that one…","headline":"TensorFlow numpy array creation error with zero-sized shape element","severity":"medium","publishedAt":"2022-11-19T03:15:13.573Z","affected":["tensorflow@< 2.8.4 (fixed: 2.8.4)","tensorflow@>= 2.9.0, < 2.9.3 (fixed: 2.9.3)","tensorflow@>= 2.10.0, < 2.10.1 (fixed: 2.10.1)","tensorflow-cpu@< 2.8.4 (fixed: 2.8.4)","tensorflow-gpu@< 2.8.4 (fixed: 2.8.4)","tensorflow-cpu@>= 2.9.0, < 2.9.3 (fixed: 2.9.3)","tensorflow-gpu@>= 2.9.0, < 2.9.3 (fixed: 2.9.3)","tensorflow-cpu@>= 2.10.0, < 2.10.1 (fixed: 2.10.1)","tensorflow-gpu@>= 2.10.0, < 2.10.1 (fixed: 2.10.1)"],"epssScore":0.00355},{"id":"4ae97672-018f-415a-bb7b-16a41a14cd5e","url":"https://aisecwatch.com/issues/4ae97672-018f-415a-bb7b-16a41a14cd5e","cveId":"CVE-2022-41880","title":"CVE-2022-41880: TensorFlow is an open source platform for machine learning. When the `BaseCandidateSamplerOp` function receives a value…","headline":"TensorFlow heap out-of-bounds read in BaseCandidateSamplerOp","severity":"medium","publishedAt":"2022-11-19T03:15:10.007Z","affected":["tensorflow@>= 2.10.0, < 2.10.1 (fixed: 2.10.1)","tensorflow-cpu@>= 2.10.0, < 2.10.1 (fixed: 2.10.1)","tensorflow-gpu@>= 2.10.0, < 2.10.1 (fixed: 2.10.1)","tensorflow@< 2.8.4 (fixed: 2.8.4)","tensorflow-cpu@< 2.8.4 (fixed: 2.8.4)","tensorflow-gpu@< 2.8.4 (fixed: 2.8.4)","tensorflow@>= 2.9.0, < 2.9.3 (fixed: 2.9.3)","tensorflow-cpu@>= 2.9.0, < 2.9.3 (fixed: 2.9.3)","tensorflow-gpu@>= 2.9.0, < 2.9.3 (fixed: 2.9.3)"],"epssScore":0.0041},{"id":"92fd6712-bae7-4605-93b8-fb474762d0ae","url":"https://aisecwatch.com/issues/92fd6712-bae7-4605-93b8-fb474762d0ae","cveId":"CVE-2022-41883","title":"CVE-2022-41883: TensorFlow is an open source platform for machine learning. When ops that have specified input sizes receive a…","headline":"TensorFlow crash in ops with specified input sizes when input count differs","severity":"medium","publishedAt":"2022-11-19T02:15:10.923Z","affected":["tensorflow@= 2.10.0 (fixed: 2.10.1)","tensorflow-cpu@= 2.10.0 (fixed: 2.10.1)","tensorflow-gpu@= 2.10.0 (fixed: 2.10.1)"],"epssScore":0.00376},{"id":"32264060-2222-4876-b998-95915f96bc94","url":"https://aisecwatch.com/issues/32264060-2222-4876-b998-95915f96bc94","cveId":"CVE-2022-36027","title":"CVE-2022-36027: TensorFlow is an open source platform for machine learning. When converting transposed convolutions using per-channel…","headline":"TensorFlow crash in converter with per-channel quantization","severity":"medium","publishedAt":"2022-09-17T03:15:11.430Z","affected":["tensorflow@< 2.7.2 (fixed: 2.7.2)","tensorflow@>= 2.8.0, < 2.8.1 (fixed: 2.8.1)","tensorflow@>= 2.9.0, < 2.9.1 (fixed: 2.9.1)","tensorflow-cpu@< 2.7.2 (fixed: 2.7.2)","tensorflow-cpu@>= 2.8.0, < 2.8.1 (fixed: 2.8.1)","tensorflow-cpu@>= 2.9.0, < 2.9.1 (fixed: 2.9.1)","tensorflow-gpu@< 2.7.2 (fixed: 2.7.2)","tensorflow-gpu@>= 2.8.0, < 2.8.1 (fixed: 2.8.1)","tensorflow-gpu@>= 2.9.0, < 2.9.1 (fixed: 2.9.1)"],"epssScore":0.00765},{"id":"ed77a88b-bf09-46dd-b637-9d8439af4064","url":"https://aisecwatch.com/issues/ed77a88b-bf09-46dd-b637-9d8439af4064","cveId":"CVE-2022-36017","title":"CVE-2022-36017: TensorFlow is an open source platform for machine learning. If `Requantize` is given `input_min`, `input_max`…","headline":"TensorFlow segfault in Requantize with nonzero rank tensors","severity":"medium","publishedAt":"2022-09-17T03:15:11.367Z","affected":["tensorflow@< 2.7.2 (fixed: 2.7.2)","tensorflow@>= 2.8.0, < 2.8.1 (fixed: 2.8.1)","tensorflow@>= 2.9.0, < 2.9.1 (fixed: 2.9.1)","tensorflow-cpu@< 2.7.2 (fixed: 2.7.2)","tensorflow-cpu@>= 2.8.0, < 2.8.1 (fixed: 2.8.1)","tensorflow-cpu@>= 2.9.0, < 2.9.1 (fixed: 2.9.1)","tensorflow-gpu@< 2.7.2 (fixed: 2.7.2)","tensorflow-gpu@>= 2.8.0, < 2.8.1 (fixed: 2.8.1)","tensorflow-gpu@>= 2.9.0, < 2.9.1 (fixed: 2.9.1)"],"epssScore":0.0051},{"id":"74e1280c-2566-47a4-81ba-64ba7108945d","url":"https://aisecwatch.com/issues/74e1280c-2566-47a4-81ba-64ba7108945d","cveId":"CVE-2022-36016","title":"CVE-2022-36016: TensorFlow is an open source platform for machine learning. When `tensorflow::full_type::SubstituteFromAttrs` receives…","headline":"TensorFlow CHECK failure in full type substitution from attributes","severity":"medium","publishedAt":"2022-09-17T03:15:11.307Z","affected":["tensorflow@< 2.7.2 (fixed: 2.7.2)","tensorflow@>= 2.8.0, < 2.8.1 (fixed: 2.8.1)","tensorflow@>= 2.9.0, < 2.9.1 (fixed: 2.9.1)","tensorflow-cpu@< 2.7.2 (fixed: 2.7.2)","tensorflow-cpu@>= 2.8.0, < 2.8.1 (fixed: 2.8.1)","tensorflow-cpu@>= 2.9.0, < 2.9.1 (fixed: 2.9.1)","tensorflow-gpu@< 2.7.2 (fixed: 2.7.2)","tensorflow-gpu@>= 2.8.0, < 2.8.1 (fixed: 2.8.1)","tensorflow-gpu@>= 2.9.0, < 2.9.1 (fixed: 2.9.1)"],"epssScore":0.00701},{"id":"22b3ddcd-a7aa-486f-9fb8-8dc31f3c93db","url":"https://aisecwatch.com/issues/22b3ddcd-a7aa-486f-9fb8-8dc31f3c93db","cveId":"CVE-2022-36015","title":"CVE-2022-36015: TensorFlow is an open source platform for machine learning. When `RangeSize` receives values that do not fit into an…","headline":"TensorFlow crash in RangeSize when values exceed int64_t","severity":"medium","publishedAt":"2022-09-17T03:15:11.243Z","affected":["tensorflow@< 2.7.2 (fixed: 2.7.2)","tensorflow@>= 2.8.0, < 2.8.1 (fixed: 2.8.1)","tensorflow@>= 2.9.0, < 2.9.1 (fixed: 2.9.1)","tensorflow-cpu@< 2.7.2 (fixed: 2.7.2)","tensorflow-cpu@>= 2.8.0, < 2.8.1 (fixed: 2.8.1)","tensorflow-cpu@>= 2.9.0, < 2.9.1 (fixed: 2.9.1)","tensorflow-gpu@< 2.7.2 (fixed: 2.7.2)","tensorflow-gpu@>= 2.8.0, < 2.8.1 (fixed: 2.8.1)","tensorflow-gpu@>= 2.9.0, < 2.9.1 (fixed: 2.9.1)"],"epssScore":0.00701},{"id":"81caf2a6-0439-45d5-bf7a-1240234dabd8","url":"https://aisecwatch.com/issues/81caf2a6-0439-45d5-bf7a-1240234dabd8","cveId":"CVE-2022-36014","title":"CVE-2022-36014: TensorFlow is an open source platform for machine learning. When `mlir::tfg::TFOp::nameAttr` receives null type list…","headline":"TensorFlow crash in nameAttr when type list attributes are null","severity":"medium","publishedAt":"2022-09-17T03:15:11.187Z","affected":["tensorflow@< 2.7.2 (fixed: 2.7.2)","tensorflow@>= 2.8.0, < 2.8.1 (fixed: 2.8.1)","tensorflow@>= 2.9.0, < 2.9.1 (fixed: 2.9.1)","tensorflow-cpu@< 2.7.2 (fixed: 2.7.2)","tensorflow-cpu@>= 2.8.0, < 2.8.1 (fixed: 2.8.1)","tensorflow-cpu@>= 2.9.0, < 2.9.1 (fixed: 2.9.1)","tensorflow-gpu@< 2.7.2 (fixed: 2.7.2)","tensorflow-gpu@>= 2.8.0, < 2.8.1 (fixed: 2.8.1)","tensorflow-gpu@>= 2.9.0, < 2.9.1 (fixed: 2.9.1)"],"epssScore":0.00717},{"id":"6b89bf65-1123-48a1-972a-7a55d8e29748","url":"https://aisecwatch.com/issues/6b89bf65-1123-48a1-972a-7a55d8e29748","cveId":"CVE-2022-36013","title":"CVE-2022-36013: TensorFlow is an open source platform for machine learning. When `mlir::tfg::GraphDefImporter::ConvertNodeDef` tries to…","headline":"TensorFlow crash when converting NodeDefs without an op name","severity":"medium","publishedAt":"2022-09-17T03:15:11.127Z","affected":["tensorflow@< 2.7.2 (fixed: 2.7.2)","tensorflow@>= 2.8.0, < 2.8.1 (fixed: 2.8.1)","tensorflow@>= 2.9.0, < 2.9.1 (fixed: 2.9.1)","tensorflow-cpu@< 2.7.2 (fixed: 2.7.2)","tensorflow-cpu@>= 2.8.0, < 2.8.1 (fixed: 2.8.1)","tensorflow-cpu@>= 2.9.0, < 2.9.1 (fixed: 2.9.1)","tensorflow-gpu@< 2.7.2 (fixed: 2.7.2)","tensorflow-gpu@>= 2.8.0, < 2.8.1 (fixed: 2.8.1)","tensorflow-gpu@>= 2.9.0, < 2.9.1 (fixed: 2.9.1)"],"epssScore":0.00701},{"id":"ec03d54d-570a-40f3-99bf-2f28551acd47","url":"https://aisecwatch.com/issues/ec03d54d-570a-40f3-99bf-2f28551acd47","cveId":"CVE-2022-36012","title":"CVE-2022-36012: TensorFlow is an open source platform for machine learning. When `mlir::tfg::ConvertGenericFunctionToFunctionDef` is…","headline":"TensorFlow crash in ConvertGenericFunctionToFunctionDef on empty attributes","severity":"medium","publishedAt":"2022-09-17T03:15:11.070Z","affected":["tensorflow@< 2.7.2 (fixed: 2.7.2)","tensorflow@>= 2.8.0, < 2.8.1 (fixed: 2.8.1)","tensorflow@>= 2.9.0, < 2.9.1 (fixed: 2.9.1)","tensorflow-cpu@< 2.7.2 (fixed: 2.7.2)","tensorflow-cpu@>= 2.8.0, < 2.8.1 (fixed: 2.8.1)","tensorflow-cpu@>= 2.9.0, < 2.9.1 (fixed: 2.9.1)","tensorflow-gpu@< 2.7.2 (fixed: 2.7.2)","tensorflow-gpu@>= 2.8.0, < 2.8.1 (fixed: 2.8.1)","tensorflow-gpu@>= 2.9.0, < 2.9.1 (fixed: 2.9.1)"],"epssScore":0.00701},{"id":"22fc1ef4-4c77-467b-9b74-7ec9fea14966","url":"https://aisecwatch.com/issues/22fc1ef4-4c77-467b-9b74-7ec9fea14966","cveId":"CVE-2022-36011","title":"CVE-2022-36011: TensorFlow is an open source platform for machine learning. When `mlir::tfg::ConvertGenericFunctionToFunctionDef` is…","headline":"TensorFlow null dereference in ConvertGenericFunctionToFunctionDef","severity":"medium","publishedAt":"2022-09-17T03:15:11.010Z","affected":["tensorflow@< 2.7.2 (fixed: 2.7.2)","tensorflow@>= 2.8.0, < 2.8.1 (fixed: 2.8.1)","tensorflow@>= 2.9.0, < 2.9.1 (fixed: 2.9.1)","tensorflow-cpu@< 2.7.2 (fixed: 2.7.2)","tensorflow-cpu@>= 2.8.0, < 2.8.1 (fixed: 2.8.1)","tensorflow-cpu@>= 2.9.0, < 2.9.1 (fixed: 2.9.1)","tensorflow-gpu@< 2.7.2 (fixed: 2.7.2)","tensorflow-gpu@>= 2.8.0, < 2.8.1 (fixed: 2.8.1)","tensorflow-gpu@>= 2.9.0, < 2.9.1 (fixed: 2.9.1)"],"epssScore":0.00478},{"id":"f5d2f6ea-2932-4565-a8c0-96b6e947b1b0","url":"https://aisecwatch.com/issues/f5d2f6ea-2932-4565-a8c0-96b6e947b1b0","cveId":"CVE-2022-36005","title":"CVE-2022-36005: TensorFlow is an open source platform for machine learning. When `tf.quantization.fake_quant_with_min_max_vars_gradient`…","headline":"TensorFlow denial of service via nonscalar min or max in fake_quant","severity":"medium","publishedAt":"2022-09-17T03:15:10.937Z","affected":["tensorflow@< 2.7.2 (fixed: 2.7.2)","tensorflow@>= 2.8.0, < 2.8.1 (fixed: 2.8.1)","tensorflow@>= 2.9.0, < 2.9.1 (fixed: 2.9.1)","tensorflow-cpu@< 2.7.2 (fixed: 2.7.2)","tensorflow-cpu@>= 2.8.0, < 2.8.1 (fixed: 2.8.1)","tensorflow-cpu@>= 2.9.0, < 2.9.1 (fixed: 2.9.1)","tensorflow-gpu@< 2.7.2 (fixed: 2.7.2)","tensorflow-gpu@>= 2.8.0, < 2.8.1 (fixed: 2.8.1)","tensorflow-gpu@>= 2.9.0, < 2.9.1 (fixed: 2.9.1)"],"epssScore":0.00478},{"id":"a48e3a68-abc7-4745-b7f6-9e01dacfbbfd","url":"https://aisecwatch.com/issues/a48e3a68-abc7-4745-b7f6-9e01dacfbbfd","cveId":"CVE-2022-36004","title":"CVE-2022-36004: TensorFlow is an open source platform for machine learning. When `tf.random.gamma` receives large input shape and…","headline":"TensorFlow denial of service through tf.random.gamma with large inputs","severity":"medium","publishedAt":"2022-09-17T03:15:10.880Z","affected":["tensorflow@< 2.7.2 (fixed: 2.7.2)","tensorflow@>= 2.8.0, < 2.8.1 (fixed: 2.8.1)","tensorflow@>= 2.9.0, < 2.9.1 (fixed: 2.9.1)","tensorflow-cpu@< 2.7.2 (fixed: 2.7.2)","tensorflow-cpu@>= 2.8.0, < 2.8.1 (fixed: 2.8.1)","tensorflow-cpu@>= 2.9.0, < 2.9.1 (fixed: 2.9.1)","tensorflow-gpu@< 2.7.2 (fixed: 2.7.2)","tensorflow-gpu@>= 2.8.0, < 2.8.1 (fixed: 2.8.1)","tensorflow-gpu@>= 2.9.0, < 2.9.1 (fixed: 2.9.1)"],"epssScore":0.00488},{"id":"1888fb77-2ba6-4085-a26e-9905286a1950","url":"https://aisecwatch.com/issues/1888fb77-2ba6-4085-a26e-9905286a1950","cveId":"CVE-2022-36003","title":"CVE-2022-36003: TensorFlow is an open source platform for machine learning. When `RandomPoissonV2` receives large input shape and…","headline":"TensorFlow denial of service through RandomPoissonV2","severity":"medium","publishedAt":"2022-09-17T03:15:10.823Z","affected":["tensorflow@< 2.7.2 (fixed: 2.7.2)","tensorflow@>= 2.8.0, < 2.8.1 (fixed: 2.8.1)","tensorflow@>= 2.9.0, < 2.9.1 (fixed: 2.9.1)","tensorflow-cpu@< 2.7.2 (fixed: 2.7.2)","tensorflow-cpu@>= 2.8.0, < 2.8.1 (fixed: 2.8.1)","tensorflow-cpu@>= 2.9.0, < 2.9.1 (fixed: 2.9.1)","tensorflow-gpu@< 2.7.2 (fixed: 2.7.2)","tensorflow-gpu@>= 2.8.0, < 2.8.1 (fixed: 2.8.1)","tensorflow-gpu@>= 2.9.0, < 2.9.1 (fixed: 2.9.1)"],"epssScore":0.00478},{"id":"8277e6f0-ec75-4170-9049-323fcc972999","url":"https://aisecwatch.com/issues/8277e6f0-ec75-4170-9049-323fcc972999","cveId":"CVE-2022-36002","title":"CVE-2022-36002: TensorFlow is an open source platform for machine learning. When `Unbatch` receives a nonscalar input `id`, it gives a…","headline":"TensorFlow denial of service through Unbatch with nonscalar id input","severity":"medium","publishedAt":"2022-09-17T03:15:10.763Z","affected":["tensorflow@< 2.7.2 (fixed: 2.7.2)","tensorflow@>= 2.8.0, < 2.8.1 (fixed: 2.8.1)","tensorflow@>= 2.9.0, < 2.9.1 (fixed: 2.9.1)","tensorflow-cpu@< 2.7.2 (fixed: 2.7.2)","tensorflow-cpu@>= 2.8.0, < 2.8.1 (fixed: 2.8.1)","tensorflow-cpu@>= 2.9.0, < 2.9.1 (fixed: 2.9.1)","tensorflow-gpu@< 2.7.2 (fixed: 2.7.2)","tensorflow-gpu@>= 2.8.0, < 2.8.1 (fixed: 2.8.1)","tensorflow-gpu@>= 2.9.0, < 2.9.1 (fixed: 2.9.1)"],"epssScore":0.00478},{"id":"59445781-1f74-4439-a9db-fa434eee0a22","url":"https://aisecwatch.com/issues/59445781-1f74-4439-a9db-fa434eee0a22","cveId":"CVE-2022-36001","title":"CVE-2022-36001: TensorFlow is an open source platform for machine learning. When `DrawBoundingBoxes` receives an input `boxes` that is…","headline":"TensorFlow denial of service through DrawBoundingBoxes","severity":"medium","publishedAt":"2022-09-17T03:15:10.707Z","affected":["tensorflow@< 2.7.2 (fixed: 2.7.2)","tensorflow@>= 2.8.0, < 2.8.1 (fixed: 2.8.1)","tensorflow@>= 2.9.0, < 2.9.1 (fixed: 2.9.1)","tensorflow-cpu@< 2.7.2 (fixed: 2.7.2)","tensorflow-cpu@>= 2.8.0, < 2.8.1 (fixed: 2.8.1)","tensorflow-cpu@>= 2.9.0, < 2.9.1 (fixed: 2.9.1)","tensorflow-gpu@< 2.7.2 (fixed: 2.7.2)","tensorflow-gpu@>= 2.8.0, < 2.8.1 (fixed: 2.8.1)","tensorflow-gpu@>= 2.9.0, < 2.9.1 (fixed: 2.9.1)"],"epssScore":0.00478},{"id":"c4e901a4-7a16-47aa-b315-c8528f4ea9c4","url":"https://aisecwatch.com/issues/c4e901a4-7a16-47aa-b315-c8528f4ea9c4","cveId":"CVE-2022-36000","title":"CVE-2022-36000: TensorFlow is an open source platform for machine learning. When `mlir::tfg::ConvertGenericFunctionToFunctionDef` is…","headline":"TensorFlow null dereference in ConvertGenericFunctionToFunctionDef","severity":"medium","publishedAt":"2022-09-17T03:15:10.647Z","affected":["tensorflow@< 2.7.2 (fixed: 2.7.2)","tensorflow@>= 2.8.0, < 2.8.1 (fixed: 2.8.1)","tensorflow@>= 2.9.0, < 2.9.1 (fixed: 2.9.1)","tensorflow-cpu@< 2.7.2 (fixed: 2.7.2)","tensorflow-cpu@>= 2.8.0, < 2.8.1 (fixed: 2.8.1)","tensorflow-cpu@>= 2.9.0, < 2.9.1 (fixed: 2.9.1)","tensorflow-gpu@< 2.7.2 (fixed: 2.7.2)","tensorflow-gpu@>= 2.8.0, < 2.8.1 (fixed: 2.8.1)","tensorflow-gpu@>= 2.9.0, < 2.9.1 (fixed: 2.9.1)"],"epssScore":0.00478},{"id":"5436b272-fd7c-4210-90a8-c2ff6bf00c32","url":"https://aisecwatch.com/issues/5436b272-fd7c-4210-90a8-c2ff6bf00c32","cveId":"CVE-2022-35999","title":"CVE-2022-35999: TensorFlow is an open source platform for machine learning. When `Conv2DBackpropInput` receives empty `out_backprop`…","headline":"TensorFlow denial of service via empty Conv2DBackpropInput inputs","severity":"medium","publishedAt":"2022-09-17T03:15:10.587Z","affected":["tensorflow@< 2.7.2 (fixed: 2.7.2)","tensorflow@>= 2.8.0, < 2.8.1 (fixed: 2.8.1)","tensorflow@>= 2.9.0, < 2.9.1 (fixed: 2.9.1)","tensorflow-cpu@< 2.7.2 (fixed: 2.7.2)","tensorflow-cpu@>= 2.8.0, < 2.8.1 (fixed: 2.8.1)","tensorflow-cpu@>= 2.9.0, < 2.9.1 (fixed: 2.9.1)","tensorflow-gpu@< 2.7.2 (fixed: 2.7.2)","tensorflow-gpu@>= 2.8.0, < 2.8.1 (fixed: 2.8.1)","tensorflow-gpu@>= 2.9.0, < 2.9.1 (fixed: 2.9.1)"],"epssScore":0.00478},{"id":"21c52bd2-c7e9-43e9-bb66-ccd18bb58eda","url":"https://aisecwatch.com/issues/21c52bd2-c7e9-43e9-bb66-ccd18bb58eda","cveId":"CVE-2022-35997","title":"CVE-2022-35997: TensorFlow is an open source platform for machine learning. If `tf.sparse.cross` receives an input `separator` that is…","headline":"TensorFlow denial of service through tf.sparse.cross with non-scalar separator","severity":"medium","publishedAt":"2022-09-17T03:15:10.467Z","affected":["tensorflow@< 2.7.2 (fixed: 2.7.2)","tensorflow@>= 2.8.0, < 2.8.1 (fixed: 2.8.1)","tensorflow@>= 2.9.0, < 2.9.1 (fixed: 2.9.1)","tensorflow-cpu@< 2.7.2 (fixed: 2.7.2)","tensorflow-cpu@>= 2.8.0, < 2.8.1 (fixed: 2.8.1)","tensorflow-cpu@>= 2.9.0, < 2.9.1 (fixed: 2.9.1)","tensorflow-gpu@>= 2.9.0, < 2.9.1 (fixed: 2.9.1)","tensorflow-gpu@< 2.7.2 (fixed: 2.7.2)","tensorflow-gpu@>= 2.8.0, < 2.8.1 (fixed: 2.8.1)"],"epssScore":0.00488},{"id":"62b94aea-01de-4802-83a8-849944866c72","url":"https://aisecwatch.com/issues/62b94aea-01de-4802-83a8-849944866c72","cveId":"CVE-2022-35996","title":"CVE-2022-35996: TensorFlow is an open source platform for machine learning. If `Conv2D` is given empty `input` and the `filter` and…","headline":"TensorFlow Conv2D denial of service via empty input division by zero","severity":"medium","publishedAt":"2022-09-17T03:15:10.407Z","affected":["tensorflow@< 2.7.2 (fixed: 2.7.2)","tensorflow@>= 2.8.0, < 2.8.1 (fixed: 2.8.1)","tensorflow@>= 2.9.0, < 2.9.1 (fixed: 2.9.1)","tensorflow-cpu@< 2.7.2 (fixed: 2.7.2)","tensorflow-cpu@>= 2.8.0, < 2.8.1 (fixed: 2.8.1)","tensorflow-cpu@>= 2.9.0, < 2.9.1 (fixed: 2.9.1)","tensorflow-gpu@< 2.7.2 (fixed: 2.7.2)","tensorflow-gpu@>= 2.8.0, < 2.8.1 (fixed: 2.8.1)","tensorflow-gpu@>= 2.9.0, < 2.9.1 (fixed: 2.9.1)"],"epssScore":0.00478},{"id":"5ab18efd-1e4f-435e-85c8-57564d59082f","url":"https://aisecwatch.com/issues/5ab18efd-1e4f-435e-85c8-57564d59082f","cveId":"CVE-2022-35995","title":"CVE-2022-35995: TensorFlow is an open source platform for machine learning. When `AudioSummaryV2` receives an input `sample_rate` with…","headline":"TensorFlow denial of service through AudioSummaryV2 sample_rate input","severity":"medium","publishedAt":"2022-09-17T03:15:10.347Z","affected":["tensorflow@< 2.7.2 (fixed: 2.7.2)","tensorflow@>= 2.8.0, < 2.8.1 (fixed: 2.8.1)","tensorflow@>= 2.9.0, < 2.9.1 (fixed: 2.9.1)","tensorflow-cpu@< 2.7.2 (fixed: 2.7.2)","tensorflow-cpu@>= 2.8.0, < 2.8.1 (fixed: 2.8.1)","tensorflow-cpu@>= 2.9.0, < 2.9.1 (fixed: 2.9.1)","tensorflow-gpu@< 2.7.2 (fixed: 2.7.2)","tensorflow-gpu@>= 2.8.0, < 2.8.1 (fixed: 2.8.1)","tensorflow-gpu@>= 2.9.0, < 2.9.1 (fixed: 2.9.1)"],"epssScore":0.00478},{"id":"2f3eec2b-6b08-46be-9cb3-a364346fc20c","url":"https://aisecwatch.com/issues/2f3eec2b-6b08-46be-9cb3-a364346fc20c","cveId":"CVE-2022-35994","title":"CVE-2022-35994: TensorFlow is an open source platform for machine learning. When `CollectiveGather` receives an scalar input `input`…","headline":"TensorFlow denial of service through CollectiveGather with scalar input","severity":"medium","publishedAt":"2022-09-17T03:15:10.290Z","affected":["tensorflow@< 2.7.2 (fixed: 2.7.2)","tensorflow@>= 2.8.0, < 2.8.1 (fixed: 2.8.1)","tensorflow@>= 2.9.0, < 2.9.1 (fixed: 2.9.1)","tensorflow-cpu@< 2.7.2 (fixed: 2.7.2)","tensorflow-cpu@>= 2.8.0, < 2.8.1 (fixed: 2.8.1)","tensorflow-cpu@>= 2.9.0, < 2.9.1 (fixed: 2.9.1)","tensorflow-gpu@< 2.7.2 (fixed: 2.7.2)","tensorflow-gpu@>= 2.8.0, < 2.8.1 (fixed: 2.8.1)","tensorflow-gpu@>= 2.9.0, < 2.9.1 (fixed: 2.9.1)"],"epssScore":0.00478},{"id":"b358536f-03ba-4639-ad60-6c5bbb5d4585","url":"https://aisecwatch.com/issues/b358536f-03ba-4639-ad60-6c5bbb5d4585","cveId":"CVE-2022-35993","title":"CVE-2022-35993: TensorFlow is an open source platform for machine learning. When `SetSize` receives an input `set_shape` that is not a…","headline":null,"severity":"medium","publishedAt":"2022-09-17T03:15:10.227Z","affected":["tensorflow@< 2.7.2 (fixed: 2.7.2)","tensorflow@>= 2.8.0, < 2.8.1 (fixed: 2.8.1)","tensorflow@>= 2.9.0, < 2.9.1 (fixed: 2.9.1)","tensorflow-cpu@< 2.7.2 (fixed: 2.7.2)","tensorflow-cpu@>= 2.8.0, < 2.8.1 (fixed: 2.8.1)","tensorflow-cpu@>= 2.9.0, < 2.9.1 (fixed: 2.9.1)","tensorflow-gpu@< 2.7.2 (fixed: 2.7.2)","tensorflow-gpu@>= 2.8.0, < 2.8.1 (fixed: 2.8.1)","tensorflow-gpu@>= 2.9.0, < 2.9.1 (fixed: 2.9.1)"],"epssScore":0.00478},{"id":"358c346a-f4ce-4ce9-9ef0-2297b48a6f8e","url":"https://aisecwatch.com/issues/358c346a-f4ce-4ce9-9ef0-2297b48a6f8e","cveId":"CVE-2022-35992","title":"CVE-2022-35992: TensorFlow is an open source platform for machine learning. When `TensorListFromTensor` receives an `element_shape` of…","headline":"TensorFlow denial of service through TensorListFromTensor element_shape","severity":"medium","publishedAt":"2022-09-17T03:15:10.167Z","affected":["tensorflow@< 2.7.2 (fixed: 2.7.2)","tensorflow@>= 2.8.0, < 2.8.1 (fixed: 2.8.1)","tensorflow@>= 2.9.0, < 2.9.1 (fixed: 2.9.1)","tensorflow-cpu@< 2.7.2 (fixed: 2.7.2)","tensorflow-cpu@>= 2.8.0, < 2.8.1 (fixed: 2.8.1)","tensorflow-cpu@>= 2.9.0, < 2.9.1 (fixed: 2.9.1)","tensorflow-gpu@< 2.7.2 (fixed: 2.7.2)","tensorflow-gpu@>= 2.8.0, < 2.8.1 (fixed: 2.8.1)","tensorflow-gpu@>= 2.9.0, < 2.9.1 (fixed: 2.9.1)"],"epssScore":0.00478},{"id":"9abc70c2-80dd-4a51-b188-66ae0acb44a8","url":"https://aisecwatch.com/issues/9abc70c2-80dd-4a51-b188-66ae0acb44a8","cveId":"CVE-2022-35991","title":"CVE-2022-35991: TensorFlow is an open source platform for machine learning. When `TensorListScatter` and `TensorListScatterV2` receive…","headline":"TensorFlow denial of service via TensorListScatter element_shape rank","severity":"medium","publishedAt":"2022-09-17T03:15:10.100Z","affected":["tensorflow@< 2.7.2 (fixed: 2.7.2)","tensorflow@>= 2.8.0, < 2.8.1 (fixed: 2.8.1)","tensorflow@>= 2.9.0, < 2.9.1 (fixed: 2.9.1)","tensorflow-cpu@< 2.7.2 (fixed: 2.7.2)","tensorflow-cpu@>= 2.8.0, < 2.8.1 (fixed: 2.8.1)","tensorflow-cpu@>= 2.9.0, < 2.9.1 (fixed: 2.9.1)","tensorflow-gpu@< 2.7.2 (fixed: 2.7.2)","tensorflow-gpu@>= 2.8.0, < 2.8.1 (fixed: 2.8.1)","tensorflow-gpu@>= 2.9.0, < 2.9.1 (fixed: 2.9.1)"],"epssScore":0.00531},{"id":"9e7938ab-cd6a-4a78-95f9-2ad1d782fb95","url":"https://aisecwatch.com/issues/9e7938ab-cd6a-4a78-95f9-2ad1d782fb95","cveId":"CVE-2022-36026","title":"CVE-2022-36026: TensorFlow is an open source platform for machine learning. If `QuantizeAndDequantizeV3` is given a nonscalar…","headline":"TensorFlow denial of service via QuantizeAndDequantizeV3 nonscalar num_bits","severity":"medium","publishedAt":"2022-09-17T02:15:11.953Z","affected":["tensorflow@< 2.7.2 (fixed: 2.7.2)","tensorflow@>= 2.8.0, < 2.8.1 (fixed: 2.8.1)","tensorflow@>= 2.9.0, < 2.9.1 (fixed: 2.9.1)","tensorflow-cpu@< 2.7.2 (fixed: 2.7.2)","tensorflow-cpu@>= 2.8.0, < 2.8.1 (fixed: 2.8.1)","tensorflow-cpu@>= 2.9.0, < 2.9.1 (fixed: 2.9.1)","tensorflow-gpu@< 2.7.2 (fixed: 2.7.2)","tensorflow-gpu@>= 2.8.0, < 2.8.1 (fixed: 2.8.1)","tensorflow-gpu@>= 2.9.0, < 2.9.1 (fixed: 2.9.1)"],"epssScore":0.00478},{"id":"32d20b6e-b878-4a72-b065-ce2774994d97","url":"https://aisecwatch.com/issues/32d20b6e-b878-4a72-b065-ce2774994d97","cveId":"CVE-2022-36019","title":"CVE-2022-36019: TensorFlow is an open source platform for machine learning. If `FakeQuantWithMinMaxVarsPerChannel` is given `min` or…","headline":"TensorFlow denial of service via FakeQuantWithMinMaxVarsPerChannel","severity":"medium","publishedAt":"2022-09-17T02:15:11.887Z","affected":["tensorflow@< 2.7.2 (fixed: 2.7.2)","tensorflow@>= 2.8.0, < 2.8.1 (fixed: 2.8.1)","tensorflow@>= 2.9.0, < 2.9.1 (fixed: 2.9.1)","tensorflow-cpu@< 2.7.2 (fixed: 2.7.2)","tensorflow-cpu@>= 2.8.0, < 2.8.1 (fixed: 2.8.1)","tensorflow-cpu@>= 2.9.0, < 2.9.1 (fixed: 2.9.1)","tensorflow-gpu@< 2.7.2 (fixed: 2.7.2)","tensorflow-gpu@>= 2.8.0, < 2.8.1 (fixed: 2.8.1)","tensorflow-gpu@>= 2.9.0, < 2.9.1 (fixed: 2.9.1)"],"epssScore":0.00478},{"id":"a52fe40d-e871-4ba5-9fac-fd4ac081238a","url":"https://aisecwatch.com/issues/a52fe40d-e871-4ba5-9fac-fd4ac081238a","cveId":"CVE-2022-36018","title":"CVE-2022-36018: TensorFlow is an open source platform for machine learning. If `RaggedTensorToVariant` is given a `rt_nested_splits`…","headline":"TensorFlow denial of service through RaggedTensorToVariant with malformed splits","severity":"medium","publishedAt":"2022-09-17T02:15:11.827Z","affected":["tensorflow@< 2.7.2 (fixed: 2.7.2)","tensorflow@>= 2.8.0, < 2.8.1 (fixed: 2.8.1)","tensorflow@>= 2.9.0, < 2.9.1 (fixed: 2.9.1)","tensorflow-cpu@< 2.7.2 (fixed: 2.7.2)","tensorflow-cpu@>= 2.8.0, < 2.8.1 (fixed: 2.8.1)","tensorflow-cpu@>= 2.9.0, < 2.9.1 (fixed: 2.9.1)","tensorflow-gpu@< 2.7.2 (fixed: 2.7.2)","tensorflow-gpu@>= 2.8.0, < 2.8.1 (fixed: 2.8.1)","tensorflow-gpu@>= 2.9.0, < 2.9.1 (fixed: 2.9.1)"],"epssScore":0.00462},{"id":"42696154-9a80-4f3d-9348-b55480c91d27","url":"https://aisecwatch.com/issues/42696154-9a80-4f3d-9348-b55480c91d27","cveId":"CVE-2022-35990","title":"CVE-2022-35990: TensorFlow is an open source platform for machine learning. When `tf.quantization.fake_quant_with_min_max_vars_per_chann…","headline":null,"severity":"medium","publishedAt":"2022-09-17T02:15:11.727Z","affected":["tensorflow@< 2.7.2 (fixed: 2.7.2)","tensorflow@>= 2.8.0, < 2.8.1 (fixed: 2.8.1)","tensorflow@>= 2.9.0, < 2.9.1 (fixed: 2.9.1)","tensorflow-cpu@< 2.7.2 (fixed: 2.7.2)","tensorflow-cpu@>= 2.8.0, < 2.8.1 (fixed: 2.8.1)","tensorflow-cpu@>= 2.9.0, < 2.9.1 (fixed: 2.9.1)","tensorflow-gpu@< 2.7.2 (fixed: 2.7.2)","tensorflow-gpu@>= 2.8.0, < 2.8.1 (fixed: 2.8.1)","tensorflow-gpu@>= 2.9.0, < 2.9.1 (fixed: 2.9.1)"],"epssScore":0.00462},{"id":"fcc9cd8e-d2f2-4bbb-b351-33876f467e75","url":"https://aisecwatch.com/issues/fcc9cd8e-d2f2-4bbb-b351-33876f467e75","cveId":"CVE-2022-35989","title":"CVE-2022-35989: TensorFlow is an open source platform for machine learning. When `MaxPool` receives a window size input array `ksize`…","headline":"TensorFlow denial of service through MaxPool ksize input on GPU","severity":"medium","publishedAt":"2022-09-17T02:15:11.667Z","affected":["tensorflow@< 2.7.2 (fixed: 2.7.2)","tensorflow@>= 2.8.0, < 2.8.1 (fixed: 2.8.1)","tensorflow@>= 2.9.0, < 2.9.1 (fixed: 2.9.1)","tensorflow-cpu@< 2.7.2 (fixed: 2.7.2)","tensorflow-cpu@>= 2.8.0, < 2.8.1 (fixed: 2.8.1)","tensorflow-cpu@>= 2.9.0, < 2.9.1 (fixed: 2.9.1)","tensorflow-gpu@< 2.7.2 (fixed: 2.7.2)","tensorflow-gpu@>= 2.8.0, < 2.8.1 (fixed: 2.8.1)","tensorflow-gpu@>= 2.9.0, < 2.9.1 (fixed: 2.9.1)"],"epssScore":0.00478},{"id":"9dc3a023-75ad-4d1c-b309-c6bd8e3e2566","url":"https://aisecwatch.com/issues/9dc3a023-75ad-4d1c-b309-c6bd8e3e2566","cveId":"CVE-2022-35988","title":"CVE-2022-35988: TensorFlow is an open source platform for machine learning. When `tf.linalg.matrix_rank` receives an empty input `a`…","headline":"TensorFlow denial of service through empty input to matrix_rank on GPU","severity":"medium","publishedAt":"2022-09-17T02:15:11.607Z","affected":["tensorflow@< 2.7.2 (fixed: 2.7.2)","tensorflow@>= 2.8.0, < 2.8.1 (fixed: 2.8.1)","tensorflow@>= 2.9.0, < 2.9.1 (fixed: 2.9.1)","tensorflow-cpu@< 2.7.2 (fixed: 2.7.2)","tensorflow-cpu@>= 2.8.0, < 2.8.1 (fixed: 2.8.1)","tensorflow-cpu@>= 2.9.0, < 2.9.1 (fixed: 2.9.1)","tensorflow-gpu@< 2.7.2 (fixed: 2.7.2)","tensorflow-gpu@>= 2.8.0, < 2.8.1 (fixed: 2.8.1)","tensorflow-gpu@>= 2.9.0, < 2.9.1 (fixed: 2.9.1)"],"epssScore":0.00488},{"id":"365bf74d-bcc3-4af1-8b62-ffef8098cabf","url":"https://aisecwatch.com/issues/365bf74d-bcc3-4af1-8b62-ffef8098cabf","cveId":"CVE-2022-35987","title":"CVE-2022-35987: TensorFlow is an open source platform for machine learning. `DenseBincount` assumes its input tensor `weights` to…","headline":"TensorFlow DenseBincount denial of service via mismatched weights shape","severity":"medium","publishedAt":"2022-09-17T02:15:11.547Z","affected":["tensorflow@< 2.7.2 (fixed: 2.7.2)","tensorflow@>= 2.8.0, < 2.8.1 (fixed: 2.8.1)","tensorflow@>= 2.9.0, < 2.9.1 (fixed: 2.9.1)","tensorflow-cpu@< 2.7.2 (fixed: 2.7.2)","tensorflow-cpu@>= 2.8.0, < 2.8.1 (fixed: 2.8.1)","tensorflow-cpu@>= 2.9.0, < 2.9.1 (fixed: 2.9.1)","tensorflow-gpu@< 2.7.2 (fixed: 2.7.2)","tensorflow-gpu@>= 2.8.0, < 2.8.1 (fixed: 2.8.1)","tensorflow-gpu@>= 2.9.0, < 2.9.1 (fixed: 2.9.1)"],"epssScore":0.00478},{"id":"a77121c3-d6c6-4d48-b847-1171722d8527","url":"https://aisecwatch.com/issues/a77121c3-d6c6-4d48-b847-1171722d8527","cveId":"CVE-2022-35985","title":"CVE-2022-35985: TensorFlow is an open source platform for machine learning. If `LRNGrad` is given an `output_image` input tensor that…","headline":null,"severity":"medium","publishedAt":"2022-09-17T02:15:11.427Z","affected":["tensorflow@< 2.7.2 (fixed: 2.7.2)","tensorflow@>= 2.8.0, < 2.8.1 (fixed: 2.8.1)","tensorflow@>= 2.9.0, < 2.9.1 (fixed: 2.9.1)","tensorflow-cpu@< 2.7.2 (fixed: 2.7.2)","tensorflow-cpu@>= 2.8.0, < 2.8.1 (fixed: 2.8.1)","tensorflow-cpu@>= 2.9.0, < 2.9.1 (fixed: 2.9.1)","tensorflow-gpu@< 2.7.2 (fixed: 2.7.2)","tensorflow-gpu@>= 2.8.0, < 2.8.1 (fixed: 2.8.1)","tensorflow-gpu@>= 2.9.0, < 2.9.1 (fixed: 2.9.1)"],"epssScore":0.00478},{"id":"c093f463-9bc2-427f-9dd2-84ddb601fda4","url":"https://aisecwatch.com/issues/c093f463-9bc2-427f-9dd2-84ddb601fda4","cveId":"CVE-2022-35984","title":"CVE-2022-35984: TensorFlow is an open source platform for machine learning. `ParameterizedTruncatedNormal` assumes `shape` is of type…","headline":"TensorFlow ParameterizedTruncatedNormal denial of service via int64 shape","severity":"medium","publishedAt":"2022-09-17T02:15:11.367Z","affected":["tensorflow@< 2.7.2 (fixed: 2.7.2)","tensorflow@>= 2.8.0, < 2.8.1 (fixed: 2.8.1)","tensorflow@>= 2.9.0, < 2.9.1 (fixed: 2.9.1)","tensorflow-cpu@< 2.7.2 (fixed: 2.7.2)","tensorflow-cpu@>= 2.8.0, < 2.8.1 (fixed: 2.8.1)","tensorflow-cpu@>= 2.9.0, < 2.9.1 (fixed: 2.9.1)","tensorflow-gpu@< 2.7.2 (fixed: 2.7.2)","tensorflow-gpu@>= 2.8.0, < 2.8.1 (fixed: 2.8.1)","tensorflow-gpu@>= 2.9.0, < 2.9.1 (fixed: 2.9.1)"],"epssScore":0.00478},{"id":"a6b66de9-93f2-4c12-815b-ab586979d803","url":"https://aisecwatch.com/issues/a6b66de9-93f2-4c12-815b-ab586979d803","cveId":"CVE-2022-35983","title":"CVE-2022-35983: TensorFlow is an open source platform for machine learning. If `Save` or `SaveSlices` is run over tensors of an…","headline":"TensorFlow denial of service through Save and SaveSlices on unsupported dtype","severity":"medium","publishedAt":"2022-09-17T02:15:11.303Z","affected":["tensorflow@< 2.7.2 (fixed: 2.7.2)","tensorflow@>= 2.8.0, < 2.8.1 (fixed: 2.8.1)","tensorflow@>= 2.9.0, < 2.9.1 (fixed: 2.9.1)","tensorflow-cpu@< 2.7.2 (fixed: 2.7.2)","tensorflow-cpu@>= 2.8.0, < 2.8.1 (fixed: 2.8.1)","tensorflow-cpu@>= 2.9.0, < 2.9.1 (fixed: 2.9.1)","tensorflow-gpu@< 2.7.2 (fixed: 2.7.2)","tensorflow-gpu@>= 2.8.0, < 2.8.1 (fixed: 2.8.1)","tensorflow-gpu@>= 2.9.0, < 2.9.1 (fixed: 2.9.1)"],"epssScore":0.00478},{"id":"ea1a2953-0db7-4bf9-a0b7-9a5b592d2300","url":"https://aisecwatch.com/issues/ea1a2953-0db7-4bf9-a0b7-9a5b592d2300","cveId":"CVE-2022-35982","title":"CVE-2022-35982: TensorFlow is an open source platform for machine learning. If `SparseBincount` is given inputs for `indices`…","headline":"TensorFlow denial of service via invalid sparse tensor in SparseBincount","severity":"medium","publishedAt":"2022-09-17T02:15:11.243Z","affected":["tensorflow@< 2.7.2 (fixed: 2.7.2)","tensorflow@>= 2.8.0, < 2.8.1 (fixed: 2.8.1)","tensorflow@>= 2.9.0, < 2.9.1 (fixed: 2.9.1)","tensorflow-cpu@< 2.7.2 (fixed: 2.7.2)","tensorflow-cpu@>= 2.8.0, < 2.8.1 (fixed: 2.8.1)","tensorflow-cpu@>= 2.9.0, < 2.9.1 (fixed: 2.9.1)","tensorflow-gpu@< 2.7.2 (fixed: 2.7.2)","tensorflow-gpu@>= 2.8.0, < 2.8.1 (fixed: 2.8.1)","tensorflow-gpu@>= 2.9.0, < 2.9.1 (fixed: 2.9.1)"],"epssScore":0.0051},{"id":"b67b12ff-8636-4782-9b7b-03487c9a2302","url":"https://aisecwatch.com/issues/b67b12ff-8636-4782-9b7b-03487c9a2302","cveId":"CVE-2022-35981","title":"CVE-2022-35981: TensorFlow is an open source platform for machine learning. `FractionalMaxPoolGrad` validates its inputs with `CHECK`…","headline":"TensorFlow FractionalMaxPoolGrad denial of service from CHECK failures","severity":"medium","publishedAt":"2022-09-17T02:15:11.183Z","affected":["tensorflow@< 2.7.2 (fixed: 2.7.2)","tensorflow@>= 2.8.0, < 2.8.1 (fixed: 2.8.1)","tensorflow@>= 2.9.0, < 2.9.1 (fixed: 2.9.1)","tensorflow-cpu@< 2.7.2 (fixed: 2.7.2)","tensorflow-cpu@>= 2.8.0, < 2.8.1 (fixed: 2.8.1)","tensorflow-cpu@>= 2.9.0, < 2.9.1 (fixed: 2.9.1)","tensorflow-gpu@< 2.7.2 (fixed: 2.7.2)","tensorflow-gpu@>= 2.8.0, < 2.8.1 (fixed: 2.8.1)","tensorflow-gpu@>= 2.9.0, < 2.9.1 (fixed: 2.9.1)"],"epssScore":0.00478},{"id":"f89437e1-7fd4-40d8-aed9-80ff2a037806","url":"https://aisecwatch.com/issues/f89437e1-7fd4-40d8-aed9-80ff2a037806","cveId":"CVE-2022-35979","title":"CVE-2022-35979: TensorFlow is an open source platform for machine learning. If `QuantizedRelu` or `QuantizedRelu6` are given nonscalar…","headline":"TensorFlow segfault in QuantizedRelu and QuantizedRelu6 from nonscalar inputs","severity":"medium","publishedAt":"2022-09-17T02:15:11.117Z","affected":["tensorflow@< 2.7.2 (fixed: 2.7.2)","tensorflow@>= 2.8.0, < 2.8.1 (fixed: 2.8.1)","tensorflow@>= 2.9.0, < 2.9.1 (fixed: 2.9.1)","tensorflow-cpu@< 2.7.2 (fixed: 2.7.2)","tensorflow-cpu@>= 2.8.0, < 2.8.1 (fixed: 2.8.1)","tensorflow-cpu@>= 2.9.0, < 2.9.1 (fixed: 2.9.1)","tensorflow-gpu@< 2.7.2 (fixed: 2.7.2)","tensorflow-gpu@>= 2.8.0, < 2.8.1 (fixed: 2.8.1)","tensorflow-gpu@>= 2.9.0, < 2.9.1 (fixed: 2.9.1)"],"epssScore":0.0051},{"id":"230e8e5f-cf6b-45ab-81db-19078d201fb4","url":"https://aisecwatch.com/issues/230e8e5f-cf6b-45ab-81db-19078d201fb4","cveId":"CVE-2022-35974","title":"CVE-2022-35974: TensorFlow is an open source platform for machine learning. If `QuantizeDownAndShrinkRange` is given nonscalar inputs…","headline":"TensorFlow denial of service via nonscalar inputs to QuantizeDownAndShrinkRange","severity":"medium","publishedAt":"2022-09-17T01:15:09.550Z","affected":["tensorflow@< 2.7.2 (fixed: 2.7.2)","tensorflow@>= 2.8.0, < 2.8.1 (fixed: 2.8.1)","tensorflow@>= 2.9.0, < 2.9.1 (fixed: 2.9.1)","tensorflow-cpu@< 2.7.2 (fixed: 2.7.2)","tensorflow-cpu@>= 2.8.0, < 2.8.1 (fixed: 2.8.1)","tensorflow-cpu@>= 2.9.0, < 2.9.1 (fixed: 2.9.1)","tensorflow-gpu@< 2.7.2 (fixed: 2.7.2)","tensorflow-gpu@>= 2.8.0, < 2.8.1 (fixed: 2.8.1)","tensorflow-gpu@>= 2.9.0, < 2.9.1 (fixed: 2.9.1)"],"epssScore":0.0051},{"id":"a24d5656-7166-4fa8-8b3f-7a52b46cbc12","url":"https://aisecwatch.com/issues/a24d5656-7166-4fa8-8b3f-7a52b46cbc12","cveId":"CVE-2022-35973","title":"CVE-2022-35973: TensorFlow is an open source platform for machine learning. If `QuantizedMatMul` is given nonscalar input for: `min_a`…","headline":"TensorFlow segfault in QuantizedMatMul from nonscalar min and max inputs","severity":"medium","publishedAt":"2022-09-17T01:15:09.490Z","affected":["tensorflow@< 2.7.2 (fixed: 2.7.2)","tensorflow@>= 2.8.0, < 2.8.1 (fixed: 2.8.1)","tensorflow@>= 2.9.0, < 2.9.1 (fixed: 2.9.1)","tensorflow-cpu@< 2.7.2 (fixed: 2.7.2)","tensorflow-cpu@>= 2.8.0, < 2.8.1 (fixed: 2.8.1)","tensorflow-cpu@>= 2.9.0, < 2.9.1 (fixed: 2.9.1)","tensorflow-gpu@< 2.7.2 (fixed: 2.7.2)","tensorflow-gpu@>= 2.8.0, < 2.8.1 (fixed: 2.8.1)","tensorflow-gpu@>= 2.9.0, < 2.9.1 (fixed: 2.9.1)"],"epssScore":0.0051},{"id":"cfbe52f7-585d-4f12-a5b3-295244de6b1c","url":"https://aisecwatch.com/issues/cfbe52f7-585d-4f12-a5b3-295244de6b1c","cveId":"CVE-2022-35972","title":"CVE-2022-35972: TensorFlow is an open source platform for machine learning. If `QuantizedBiasAdd` is given `min_input`, `max_input`…","headline":"TensorFlow QuantizedBiasAdd segfault via nonzero-rank min and max tensors","severity":"medium","publishedAt":"2022-09-17T01:15:09.427Z","affected":["tensorflow@< 2.7.2 (fixed: 2.7.2)","tensorflow@>= 2.8.0, < 2.8.1 (fixed: 2.8.1)","tensorflow@>= 2.9.0, < 2.9.1 (fixed: 2.9.1)","tensorflow-cpu@< 2.7.2 (fixed: 2.7.2)","tensorflow-cpu@>= 2.8.0, < 2.8.1 (fixed: 2.8.1)","tensorflow-cpu@>= 2.9.0, < 2.9.1 (fixed: 2.9.1)","tensorflow-gpu@< 2.7.2 (fixed: 2.7.2)","tensorflow-gpu@>= 2.8.0, < 2.8.1 (fixed: 2.8.1)","tensorflow-gpu@>= 2.9.0, < 2.9.1 (fixed: 2.9.1)"],"epssScore":0.00493},{"id":"2a9c70c8-10f1-4b46-9812-e37d6046fe5c","url":"https://aisecwatch.com/issues/2a9c70c8-10f1-4b46-9812-e37d6046fe5c","cveId":"CVE-2022-35971","title":"CVE-2022-35971: TensorFlow is an open source platform for machine learning. If `FakeQuantWithMinMaxVars` is given `min` or `max`…","headline":"TensorFlow denial of service via FakeQuantWithMinMaxVars","severity":"medium","publishedAt":"2022-09-17T01:15:09.360Z","affected":["tensorflow@< 2.7.2 (fixed: 2.7.2)","tensorflow@>= 2.8.0, < 2.8.1 (fixed: 2.8.1)","tensorflow@>= 2.9.0, < 2.9.1 (fixed: 2.9.1)","tensorflow-cpu@< 2.7.2 (fixed: 2.7.2)","tensorflow-cpu@>= 2.8.0, < 2.8.1 (fixed: 2.8.1)","tensorflow-cpu@>= 2.9.0, < 2.9.1 (fixed: 2.9.1)","tensorflow-gpu@>= 2.9.0, < 2.9.1 (fixed: 2.9.1)","tensorflow-gpu@< 2.7.2 (fixed: 2.7.2)","tensorflow-gpu@>= 2.8.0, < 2.8.1 (fixed: 2.8.1)"],"epssScore":0.00462},{"id":"2f2a6e64-d0a6-4bf3-a3db-827a24be596f","url":"https://aisecwatch.com/issues/2f2a6e64-d0a6-4bf3-a3db-827a24be596f","cveId":"CVE-2022-35970","title":"CVE-2022-35970: TensorFlow is an open source platform for machine learning. If `QuantizedInstanceNorm` is given `x_min` or `x_max`…","headline":"TensorFlow segfault in QuantizedInstanceNorm with nonzero-rank x_min or x_max","severity":"medium","publishedAt":"2022-09-17T01:15:09.293Z","affected":["tensorflow@< 2.7.2 (fixed: 2.7.2)","tensorflow@>= 2.8.0, < 2.8.1 (fixed: 2.8.1)","tensorflow@>= 2.9.0, < 2.9.1 (fixed: 2.9.1)","tensorflow-cpu@< 2.7.2 (fixed: 2.7.2)","tensorflow-cpu@>= 2.8.0, < 2.8.1 (fixed: 2.8.1)","tensorflow-cpu@>= 2.9.0, < 2.9.1 (fixed: 2.9.1)","tensorflow-gpu@< 2.7.2 (fixed: 2.7.2)","tensorflow-gpu@>= 2.8.0, < 2.8.1 (fixed: 2.8.1)","tensorflow-gpu@>= 2.9.0, < 2.9.1 (fixed: 2.9.1)"],"epssScore":0.0051},{"id":"c08fc03c-6487-4784-a358-115d13855aa4","url":"https://aisecwatch.com/issues/c08fc03c-6487-4784-a358-115d13855aa4","cveId":"CVE-2022-35969","title":"CVE-2022-35969: TensorFlow is an open source platform for machine learning. The implementation of `Conv2DBackpropInput` requires…","headline":"TensorFlow denial of service via Conv2DBackpropInput input_sizes","severity":"medium","publishedAt":"2022-09-17T01:15:09.227Z","affected":["tensorflow@< 2.7.2 (fixed: 2.7.2)","tensorflow@>= 2.8.0, < 2.8.1 (fixed: 2.8.1)","tensorflow@>= 2.9.0, < 2.9.1 (fixed: 2.9.1)","tensorflow-cpu@< 2.7.2 (fixed: 2.7.2)","tensorflow-cpu@>= 2.8.0, < 2.8.1 (fixed: 2.8.1)","tensorflow-cpu@>= 2.9.0, < 2.9.1 (fixed: 2.9.1)","tensorflow-gpu@< 2.7.2 (fixed: 2.7.2)","tensorflow-gpu@>= 2.8.0, < 2.8.1 (fixed: 2.8.1)","tensorflow-gpu@>= 2.9.0, < 2.9.1 (fixed: 2.9.1)"],"epssScore":0.00462},{"id":"2a05039f-e19e-4f8d-aece-19958be853bc","url":"https://aisecwatch.com/issues/2a05039f-e19e-4f8d-aece-19958be853bc","cveId":"CVE-2022-35968","title":"CVE-2022-35968: TensorFlow is an open source platform for machine learning. The implementation of `AvgPoolGrad` does not fully validate…","headline":"TensorFlow denial of service through unvalidated input in AvgPoolGrad","severity":"medium","publishedAt":"2022-09-17T01:15:09.163Z","affected":["tensorflow@< 2.7.2 (fixed: 2.7.2)","tensorflow@>= 2.8.0, < 2.8.1 (fixed: 2.8.1)","tensorflow@>= 2.9.0, < 2.9.1 (fixed: 2.9.1)","tensorflow-cpu@< 2.7.2 (fixed: 2.7.2)","tensorflow-cpu@>= 2.8.0, < 2.8.1 (fixed: 2.8.1)","tensorflow-cpu@>= 2.9.0, < 2.9.1 (fixed: 2.9.1)","tensorflow-gpu@< 2.7.2 (fixed: 2.7.2)","tensorflow-gpu@>= 2.8.0, < 2.8.1 (fixed: 2.8.1)","tensorflow-gpu@>= 2.9.0, < 2.9.1 (fixed: 2.9.1)"],"epssScore":0.00478},{"id":"bf678714-fa5e-4a72-b389-2ac4a95e2fc2","url":"https://aisecwatch.com/issues/bf678714-fa5e-4a72-b389-2ac4a95e2fc2","cveId":"CVE-2022-35967","title":"CVE-2022-35967: TensorFlow is an open source platform for machine learning. If `QuantizedAdd` is given `min_input` or `max_input`…","headline":"TensorFlow QuantizedAdd segfault via min_input or max_input tensors","severity":"medium","publishedAt":"2022-09-17T01:15:09.097Z","affected":["tensorflow@< 2.7.2 (fixed: 2.7.2)","tensorflow@>= 2.8.0, < 2.8.1 (fixed: 2.8.1)","tensorflow@>= 2.9.0, < 2.9.1 (fixed: 2.9.1)","tensorflow-cpu@< 2.7.2 (fixed: 2.7.2)","tensorflow-cpu@>= 2.8.0, < 2.8.1 (fixed: 2.8.1)","tensorflow-cpu@>= 2.9.0, < 2.9.1 (fixed: 2.9.1)","tensorflow-gpu@< 2.7.2 (fixed: 2.7.2)","tensorflow-gpu@>= 2.8.0, < 2.8.1 (fixed: 2.8.1)","tensorflow-gpu@>= 2.9.0, < 2.9.1 (fixed: 2.9.1)"],"epssScore":0.00493},{"id":"0b507677-982a-446f-939c-d6561416368d","url":"https://aisecwatch.com/issues/0b507677-982a-446f-939c-d6561416368d","cveId":"CVE-2022-35966","title":"CVE-2022-35966: TensorFlow is an open source platform for machine learning. If `QuantizedAvgPool` is given `min_input` or `max_input`…","headline":"TensorFlow segfault in QuantizedAvgPool from nonzero-rank min_input or max_input","severity":"medium","publishedAt":"2022-09-17T01:15:09.033Z","affected":["tensorflow@< 2.7.2 (fixed: 2.7.2)","tensorflow@>= 2.8.0, < 2.8.1 (fixed: 2.8.1)","tensorflow@>= 2.9.0, < 2.9.1 (fixed: 2.9.1)","tensorflow-cpu@< 2.7.2 (fixed: 2.7.2)","tensorflow-cpu@>= 2.8.0, < 2.8.1 (fixed: 2.8.1)","tensorflow-cpu@>= 2.9.0, < 2.9.1 (fixed: 2.9.1)","tensorflow-gpu@< 2.7.2 (fixed: 2.7.2)","tensorflow-gpu@>= 2.8.0, < 2.8.1 (fixed: 2.8.1)","tensorflow-gpu@>= 2.9.0, < 2.9.1 (fixed: 2.9.1)"],"epssScore":0.00493},{"id":"30789b76-b092-48ad-b2c2-0e8c20cd2787","url":"https://aisecwatch.com/issues/30789b76-b092-48ad-b2c2-0e8c20cd2787","cveId":"CVE-2022-35965","title":"CVE-2022-35965: TensorFlow is an open source platform for machine learning. If `LowerBound` or `UpperBound` is given an…","headline":"TensorFlow null pointer dereference in LowerBound causes denial of service","severity":"medium","publishedAt":"2022-09-17T01:15:08.967Z","affected":["tensorflow@< 2.7.2 (fixed: 2.7.2)","tensorflow@>= 2.8.0, < 2.8.1 (fixed: 2.8.1)","tensorflow@>= 2.9.0, < 2.9.1 (fixed: 2.9.1)","tensorflow-cpu@< 2.7.2 (fixed: 2.7.2)","tensorflow-cpu@>= 2.8.0, < 2.8.1 (fixed: 2.8.1)","tensorflow-cpu@>= 2.9.0, < 2.9.1 (fixed: 2.9.1)","tensorflow-gpu@< 2.7.2 (fixed: 2.7.2)","tensorflow-gpu@>= 2.8.0, < 2.8.1 (fixed: 2.8.1)","tensorflow-gpu@>= 2.9.0, < 2.9.1 (fixed: 2.9.1)"],"epssScore":0.00462},{"id":"ad64112d-841b-4b41-92b2-73559641673e","url":"https://aisecwatch.com/issues/ad64112d-841b-4b41-92b2-73559641673e","cveId":"CVE-2022-35964","title":"CVE-2022-35964: TensorFlow is an open source platform for machine learning. The implementation of `BlockLSTMGradV2` does not fully…","headline":"TensorFlow denial of service through BlockLSTMGradV2 input validation","severity":"medium","publishedAt":"2022-09-17T01:15:08.890Z","affected":["tensorflow@< 2.7.2 (fixed: 2.7.2)","tensorflow@>= 2.8.0, < 2.8.1 (fixed: 2.8.1)","tensorflow@>= 2.9.0, < 2.9.1 (fixed: 2.9.1)","tensorflow-cpu@< 2.7.2 (fixed: 2.7.2)","tensorflow-cpu@>= 2.8.0, < 2.8.1 (fixed: 2.8.1)","tensorflow-cpu@>= 2.9.0, < 2.9.1 (fixed: 2.9.1)","tensorflow-gpu@< 2.7.2 (fixed: 2.7.2)","tensorflow-gpu@>= 2.8.0, < 2.8.1 (fixed: 2.8.1)","tensorflow-gpu@>= 2.9.0, < 2.9.1 (fixed: 2.9.1)"],"epssScore":0.00493},{"id":"b790daef-4a8e-489e-8d19-ac2a672a46ac","url":"https://aisecwatch.com/issues/b790daef-4a8e-489e-8d19-ac2a672a46ac","cveId":"CVE-2022-35963","title":"CVE-2022-35963: TensorFlow is an open source platform for machine learning. The implementation of `FractionalAvgPoolGrad` does not…","headline":"TensorFlow denial of service through FractionalAvgPoolGrad input validation","severity":"medium","publishedAt":"2022-09-17T00:15:10.640Z","affected":["tensorflow@< 2.7.2 (fixed: 2.7.2)","tensorflow@>= 2.8.0, < 2.8.1 (fixed: 2.8.1)","tensorflow@>= 2.9.0, < 2.9.1 (fixed: 2.9.1)","tensorflow-cpu@< 2.7.2 (fixed: 2.7.2)","tensorflow-cpu@>= 2.8.0, < 2.8.1 (fixed: 2.8.1)","tensorflow-cpu@>= 2.9.0, < 2.9.1 (fixed: 2.9.1)","tensorflow-gpu@< 2.7.2 (fixed: 2.7.2)","tensorflow-gpu@>= 2.8.0, < 2.8.1 (fixed: 2.8.1)","tensorflow-gpu@>= 2.9.0, < 2.9.1 (fixed: 2.9.1)"],"epssScore":0.00478},{"id":"0fa9da28-a2ca-4243-89ab-0336bde1eda8","url":"https://aisecwatch.com/issues/0fa9da28-a2ca-4243-89ab-0336bde1eda8","cveId":"CVE-2022-35960","title":"CVE-2022-35960: TensorFlow is an open source platform for machine learning. In `core/kernels/list_kernels.cc's TensorListReserve`…","headline":"TensorFlow crash in TensorListReserve with multi-element num_elements","severity":"medium","publishedAt":"2022-09-17T00:15:10.573Z","affected":["tensorflow@< 2.7.2 (fixed: 2.7.2)","tensorflow@>= 2.8.0, < 2.8.1 (fixed: 2.8.1)","tensorflow@>= 2.9.0, < 2.9.1 (fixed: 2.9.1)","tensorflow-cpu@< 2.7.2 (fixed: 2.7.2)","tensorflow-cpu@>= 2.8.0, < 2.8.1 (fixed: 2.8.1)","tensorflow-cpu@>= 2.9.0, < 2.9.1 (fixed: 2.9.1)","tensorflow-gpu@< 2.7.2 (fixed: 2.7.2)","tensorflow-gpu@>= 2.8.0, < 2.8.1 (fixed: 2.8.1)","tensorflow-gpu@>= 2.9.0, < 2.9.1 (fixed: 2.9.1)"],"epssScore":0.00701},{"id":"aa5c2c03-8214-4fc1-8555-989f3337ff62","url":"https://aisecwatch.com/issues/aa5c2c03-8214-4fc1-8555-989f3337ff62","cveId":"CVE-2022-35959","title":"CVE-2022-35959: TensorFlow is an open source platform for machine learning. The implementation of `AvgPool3DGradOp` does not fully…","headline":"TensorFlow denial of service through AvgPool3DGradOp input shape validation","severity":"medium","publishedAt":"2022-09-17T00:15:10.510Z","affected":["tensorflow@< 2.7.2 (fixed: 2.7.2)","tensorflow@>= 2.8.0, < 2.8.1 (fixed: 2.8.1)","tensorflow@>= 2.9.0, < 2.9.1 (fixed: 2.9.1)","tensorflow-cpu@< 2.7.2 (fixed: 2.7.2)","tensorflow-cpu@>= 2.8.0, < 2.8.1 (fixed: 2.8.1)","tensorflow-cpu@>= 2.9.0, < 2.9.1 (fixed: 2.9.1)","tensorflow-gpu@< 2.7.2 (fixed: 2.7.2)","tensorflow-gpu@>= 2.8.0, < 2.8.1 (fixed: 2.8.1)","tensorflow-gpu@>= 2.9.0, < 2.9.1 (fixed: 2.9.1)"],"epssScore":0.00462},{"id":"8fee48df-7719-4980-afb7-27e9476915ed","url":"https://aisecwatch.com/issues/8fee48df-7719-4980-afb7-27e9476915ed","cveId":"CVE-2022-35952","title":"CVE-2022-35952: TensorFlow is an open source platform for machine learning. The `UnbatchGradOp` function takes an argument `id` that is…","headline":"TensorFlow UnbatchGradOp crash from malformed id and batch_index arguments","severity":"medium","publishedAt":"2022-09-17T00:15:10.443Z","affected":["tensorflow@< 2.7.2 (fixed: 2.7.2)","tensorflow@>= 2.8.0, < 2.8.1 (fixed: 2.8.1)","tensorflow@>= 2.9.0, < 2.9.1 (fixed: 2.9.1)","tensorflow-cpu@< 2.7.2 (fixed: 2.7.2)","tensorflow-cpu@>= 2.8.0, < 2.8.1 (fixed: 2.8.1)","tensorflow-cpu@>= 2.9.0, < 2.9.1 (fixed: 2.9.1)","tensorflow-gpu@< 2.7.2 (fixed: 2.7.2)","tensorflow-gpu@>= 2.8.0, < 2.8.1 (fixed: 2.8.1)","tensorflow-gpu@>= 2.9.0, < 2.9.1 (fixed: 2.9.1)"],"epssScore":0.00716},{"id":"fe249692-97dc-4ea8-85b2-4cdc22c59618","url":"https://aisecwatch.com/issues/fe249692-97dc-4ea8-85b2-4cdc22c59618","cveId":"CVE-2022-35941","title":"CVE-2022-35941: TensorFlow is an open source platform for machine learning. The `AvgPoolOp` function takes an argument `ksize` that…","headline":"TensorFlow crash through negative ksize in AvgPoolOp","severity":"medium","publishedAt":"2022-09-17T00:15:10.377Z","affected":["tensorflow@< 2.7.2 (fixed: 2.7.2)","tensorflow@>= 2.8.0, < 2.8.1 (fixed: 2.8.1)","tensorflow@>= 2.9.0, < 2.9.1 (fixed: 2.9.2)","tensorflow-cpu@< 2.7.2 (fixed: 2.7.2)","tensorflow-cpu@>= 2.8.0, < 2.8.1 (fixed: 2.8.1)","tensorflow-cpu@>= 2.9.0, < 2.9.1 (fixed: 2.9.2)","tensorflow-gpu@< 2.7.2 (fixed: 2.7.2)","tensorflow-gpu@>= 2.8.0, < 2.8.1 (fixed: 2.8.1)","tensorflow-gpu@>= 2.9.0, < 2.9.1 (fixed: 2.9.2)"],"epssScore":0.00721},{"id":"90fccf09-f712-41b6-a241-0baaa4b02b59","url":"https://aisecwatch.com/issues/90fccf09-f712-41b6-a241-0baaa4b02b59","cveId":"CVE-2022-35940","title":"CVE-2022-35940: TensorFlow is an open source platform for machine learning. The `RaggedRangOp` function takes an argument `limits` that…","headline":"TensorFlow crash from integer overflow in RaggedRangOp limits argument","severity":"medium","publishedAt":"2022-09-17T00:15:10.307Z","affected":["tensorflow@< 2.7.2 (fixed: 2.7.2)","tensorflow@>= 2.8.0, < 2.8.1 (fixed: 2.8.1)","tensorflow@>= 2.9.0, < 2.9.1 (fixed: 2.9.1)","tensorflow-cpu@< 2.7.2 (fixed: 2.7.2)","tensorflow-cpu@>= 2.8.0, < 2.8.1 (fixed: 2.8.1)","tensorflow-cpu@>= 2.9.0, < 2.9.1 (fixed: 2.9.1)","tensorflow-gpu@< 2.7.2 (fixed: 2.7.2)","tensorflow-gpu@>= 2.8.0, < 2.8.1 (fixed: 2.8.1)","tensorflow-gpu@>= 2.9.0, < 2.9.1 (fixed: 2.9.1)"],"epssScore":0.00701},{"id":"f8658c89-5960-4a39-aecf-95a3a5504e2c","url":"https://aisecwatch.com/issues/f8658c89-5960-4a39-aecf-95a3a5504e2c","cveId":"CVE-2022-35939","title":"CVE-2022-35939: TensorFlow is an open source platform for machine learning. The `ScatterNd` function takes an input argument that…","headline":"TensorFlow out-of-bounds write in ScatterNd via input indices","severity":"high","publishedAt":"2022-09-17T00:15:10.243Z","affected":["tensorflow@< 2.7.2 (fixed: 2.7.2)","tensorflow@>= 2.8.0, < 2.8.1 (fixed: 2.8.1)","tensorflow@>= 2.9.0, < 2.9.1 (fixed: 2.9.1)","tensorflow-cpu@< 2.7.2 (fixed: 2.7.2)","tensorflow-cpu@>= 2.8.0, < 2.8.1 (fixed: 2.8.1)","tensorflow-cpu@>= 2.9.0, < 2.9.1 (fixed: 2.9.1)","tensorflow-gpu@< 2.7.2 (fixed: 2.7.2)","tensorflow-gpu@>= 2.8.0, < 2.8.1 (fixed: 2.8.1)","tensorflow-gpu@>= 2.9.0, < 2.9.1 (fixed: 2.9.1)"],"epssScore":0.00566},{"id":"bc91a94c-758d-49fb-83c0-72b4fe2ca87b","url":"https://aisecwatch.com/issues/bc91a94c-758d-49fb-83c0-72b4fe2ca87b","cveId":"CVE-2022-35937","title":"CVE-2022-35937: TensorFlow is an open source platform for machine learning. The `GatherNd` function takes arguments that determine the…","headline":"TensorFlow out-of-bounds memory read in GatherNd function","severity":"high","publishedAt":"2022-09-17T00:15:10.110Z","affected":["tensorflow@< 2.7.2 (fixed: 2.7.2)","tensorflow@>= 2.8.0, < 2.8.1 (fixed: 2.8.1)","tensorflow@>= 2.9.0, < 2.9.1 (fixed: 2.9.1)","tensorflow-cpu@< 2.7.2 (fixed: 2.7.2)","tensorflow-cpu@>= 2.8.0, < 2.8.1 (fixed: 2.8.1)","tensorflow-cpu@>= 2.9.0, < 2.9.1 (fixed: 2.9.1)","tensorflow-gpu@< 2.7.2 (fixed: 2.7.2)","tensorflow-gpu@>= 2.8.0, < 2.8.1 (fixed: 2.8.1)","tensorflow-gpu@>= 2.9.0, < 2.9.1 (fixed: 2.9.1)"],"epssScore":0.00566},{"id":"58e8db48-2198-4eb6-b476-8be581bfa1e1","url":"https://aisecwatch.com/issues/58e8db48-2198-4eb6-b476-8be581bfa1e1","cveId":"CVE-2022-35935","title":"CVE-2022-35935: TensorFlow is an open source platform for machine learning. The implementation of SobolSampleOp is vulnerable to a…","headline":"TensorFlow denial of service via assertion failure in SobolSampleOp","severity":"medium","publishedAt":"2022-09-17T00:15:10.047Z","affected":["tensorflow@< 2.7.2 (fixed: 2.7.2)","tensorflow@>= 2.8.0, < 2.8.1 (fixed: 2.8.1)","tensorflow@>= 2.9.0, < 2.9.1 (fixed: 2.9.1)","tensorflow-cpu@< 2.7.2 (fixed: 2.7.2)","tensorflow-cpu@>= 2.8.0, < 2.8.1 (fixed: 2.8.1)","tensorflow-cpu@>= 2.9.0, < 2.9.1 (fixed: 2.9.1)","tensorflow-gpu@< 2.7.2 (fixed: 2.7.2)","tensorflow-gpu@>= 2.8.0, < 2.8.1 (fixed: 2.8.1)","tensorflow-gpu@>= 2.9.0, < 2.9.1 (fixed: 2.9.1)"],"epssScore":0.00531},{"id":"5f474ada-d5df-425b-beda-21399eefe6e7","url":"https://aisecwatch.com/issues/5f474ada-d5df-425b-beda-21399eefe6e7","cveId":"CVE-2022-35934","title":"CVE-2022-35934: TensorFlow is an open source platform for machine learning. The implementation of tf.reshape op in TensorFlow is…","headline":"TensorFlow denial of service through tf.reshape op overflow","severity":"medium","publishedAt":"2022-09-17T00:15:09.980Z","affected":["tensorflow@< 2.7.2 (fixed: 2.7.2)","tensorflow@>= 2.8.0, < 2.8.1 (fixed: 2.8.1)","tensorflow@>= 2.9.0, < 2.9.1 (fixed: 2.9.1)","tensorflow-cpu@< 2.7.2 (fixed: 2.7.2)","tensorflow-cpu@>= 2.8.0, < 2.8.1 (fixed: 2.8.1)","tensorflow-cpu@>= 2.9.0, < 2.9.1 (fixed: 2.9.1)","tensorflow-gpu@< 2.7.2 (fixed: 2.7.2)","tensorflow-gpu@>= 2.8.0, < 2.8.1 (fixed: 2.8.1)","tensorflow-gpu@>= 2.9.0, < 2.9.1 (fixed: 2.9.1)"],"epssScore":0.00478},{"id":"348483d7-8bbe-4c9d-b9ac-53ce505c6f36","url":"https://aisecwatch.com/issues/348483d7-8bbe-4c9d-b9ac-53ce505c6f36","cveId":"CVE-2022-29216","title":"CVE-2022-29216: TensorFlow is an open source platform for machine learning. Prior to versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4…","headline":"TensorFlow saved_model_cli code injection through eval of arguments","severity":"high","publishedAt":"2022-05-21T04:15:11.980Z","affected":["tensorflow@< 2.6.4 (fixed: 2.6.4)","tensorflow-cpu@< 2.6.4 (fixed: 2.6.4)","tensorflow-gpu@< 2.6.4 (fixed: 2.6.4)","tensorflow@>= 2.7.0, < 2.7.2 (fixed: 2.7.2)","tensorflow@>= 2.8.0, < 2.8.1 (fixed: 2.8.1)","tensorflow-cpu@>= 2.7.0, < 2.7.2 (fixed: 2.7.2)","tensorflow-cpu@>= 2.8.0, < 2.8.1 (fixed: 2.8.1)","tensorflow-gpu@>= 2.7.0, < 2.7.2 (fixed: 2.7.2)","tensorflow-gpu@>= 2.8.0, < 2.8.1 (fixed: 2.8.1)"],"epssScore":0.00549}],"checkedAt":"2026-10-09T22:24:49.878Z"},"meta":{"advisoryMatching":"by package name; advisory records do not state an ecosystem"}}