Skip to content
OpenAdvisories
High · 8.8 CVE-2018-8825 EUVD-2019-0141GHSA-frxx-2m33-6wcrPYSEC-2019-208PYSEC-2019-226PYSEC-2019-233

Improper Restriction of Operations within the Bounds of a Memory Buffer in Google TensorFlow

Published Apr 23, 2019 · Updated Aug 5, 2024 · Assigned by mitre

Package: tensorflow Package: tensorflow-cpu Package: tensorflow-gpu Ecosystem: PyPI

Description

Google TensorFlow 1.7 and below is affected by: Buffer Overflow. The impact is: execute arbitrary code (local).

Affected packages

EcosystemPackageAffectedFixedRecord
PyPI tensorflow >= 1.5.0, < 1.7.1 1.7.1 GHSA-frxx-2m33-6wcr
PyPI tensorflow < 1.7.1 1.7.1 PYSEC-2019-208
PyPI tensorflow-cpu < 1.7.1 1.7.1 PYSEC-2019-226
PyPI tensorflow-gpu >= 1.5.0, < 1.7.1 1.7.1 GHSA-frxx-2m33-6wcr
PyPI tensorflow-gpu < 1.7.1 1.7.1 PYSEC-2019-233

References