Skip to content
OpenAdvisories
Medium · 6.5 CVE-2018-7576 EUVD-2019-0139GHSA-jfq2-rj7f-9gvfPYSEC-2019-206PYSEC-2019-224PYSEC-2019-231

Null pointer dereference in TensorFlow leads to exploitation

Published Apr 23, 2019 · Updated Aug 5, 2024 · Assigned by mitre

Package: tensorflow Package: tensorflow-cpu Package: tensorflow-gpu Ecosystem: PyPI

Description

Google TensorFlow 1.6.x and earlier is affected by: Null Pointer Dereference. The type of exploitation is: context-dependent.

Affected packages

EcosystemPackageAffectedFixedRecord
PyPI tensorflow >= 1.0.0, < 1.6.0 1.6.0 GHSA-jfq2-rj7f-9gvf
PyPI tensorflow < 1.7.0rc0 1.7.0rc0 PYSEC-2019-206
PyPI tensorflow-cpu < 1.7.0rc0 1.7.0rc0 PYSEC-2019-224
PyPI tensorflow-gpu >= 1.0.0, < 1.6.0 1.6.0 GHSA-jfq2-rj7f-9gvf
PyPI tensorflow-gpu < 1.7.0rc0 1.7.0rc0 PYSEC-2019-231

References