Description
Invalid memory access and/or a heap buffer overflow in the TensorFlow XLA compiler in Google TensorFlow before 1.7.1 could cause a crash or read from other parts of process memory via a crafted configuration file.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| PyPI | tensorflow | >= 1.1.0, < 1.7.1 | 1.7.1 | GHSA-q492-f7gr-27rp |
| PyPI | tensorflow | < 1.7.1 | 1.7.1 | PYSEC-2019-204 |
| PyPI | tensorflow-cpu | < 1.7.1 | 1.7.1 | PYSEC-2019-222 |
| PyPI | tensorflow-gpu | >= 1.1.0, < 1.7.1 | 1.7.1 | GHSA-q492-f7gr-27rp |
| PyPI | tensorflow-gpu | < 1.7.1 | 1.7.1 | PYSEC-2019-229 |