Description
Memcpy parameter overlap in Google Snappy library 1.1.4, as used in Google TensorFlow before 1.7.1, could result in a crash or read from other parts of process memory.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| PyPI | tensorflow | >= 1.1.0, < 1.7.1 | 1.7.1 | GHSA-qx2v-j445-g354 |
| PyPI | tensorflow | < 1.7.1 | 1.7.1 | PYSEC-2019-207 |
| PyPI | tensorflow-cpu | < 1.7.1 | 1.7.1 | PYSEC-2019-225 |
| PyPI | tensorflow-gpu | >= 1.1.0, < 1.7.1 | 1.7.1 | GHSA-qx2v-j445-g354 |
| PyPI | tensorflow-gpu | < 1.7.1 | 1.7.1 | PYSEC-2019-232 |