Skip to content
OpenAdvisories
Medium · 6.5 CVE-2019-9635 EUVD-2019-0143GHSA-mfg7-x5m7-6p8wPYSEC-2019-210PYSEC-2019-228PYSEC-2019-235

NULL Pointer Dereference in Google TensorFlow

Published Apr 24, 2019 · Updated Aug 4, 2024 · Assigned by mitre

Package: tensorflow Package: tensorflow-cpu Package: tensorflow-gpu Ecosystem: PyPI

Description

NULL pointer dereference in Google TensorFlow before 1.12.2 could cause a denial of service via an invalid GIF file.

Affected packages

EcosystemPackageAffectedFixedRecord
PyPI tensorflow >= 1.0.0, < 1.12.1 1.12.1 GHSA-mfg7-x5m7-6p8w
PyPI tensorflow < 1.12.2 1.12.2 PYSEC-2019-210
PyPI tensorflow-cpu < 1.12.2 1.12.2 PYSEC-2019-228
PyPI tensorflow-gpu >= 1.0.0, < 1.12.1 1.12.1 GHSA-mfg7-x5m7-6p8w
PyPI tensorflow-gpu < 1.12.2 1.12.2 PYSEC-2019-235

References