Skip to content
OpenAdvisories

Vendor

Google Deepmind

1 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • Medium 5.7

    Object deserialization in Reverb leading to RCE

    There exists a use after free vulnerability in Reverb. Reverb supports the VARIANT datatype, which is supposed to represent an arbitrary object in C++. When a tensor proto of type VARIANT is unpacked, memory is first allocated to store the entire tensor, and …