Skip to content
OpenAdvisories
Critical · 9.8 CVE-2018-7575 EUVD-2019-0138GHSA-mw6v-crh8-8533PYSEC-2019-205PYSEC-2019-223PYSEC-2019-230

Integer Overflow or Wraparound in Google TensorFlow

Published Apr 24, 2019 · Updated Aug 5, 2024 · Assigned by mitre

Package: tensorflow Package: tensorflow-cpu Package: tensorflow-gpu Ecosystem: PyPI

Description

Google TensorFlow 1.7.x and earlier is affected by a Buffer Overflow vulnerability. The type of exploitation is context-dependent.

Affected packages

EcosystemPackageAffectedFixedRecord
PyPI tensorflow >= 1.0.0, < 1.7.1 1.7.1 GHSA-mw6v-crh8-8533
PyPI tensorflow < 1.7.1 1.7.1 PYSEC-2019-205
PyPI tensorflow-cpu < 1.7.1 1.7.1 PYSEC-2019-223
PyPI tensorflow-gpu >= 1.0.0, < 1.7.1 1.7.1 GHSA-mw6v-crh8-8533
PyPI tensorflow-gpu < 1.7.1 1.7.1 PYSEC-2019-230

References