| Package | Affected versions | Patched versions |
|---|---|---|
| tensorflow | ≥ 1.5.0, < 1.7.1< 1.7.1 | 1.7.1 |
| tensorflow-cpu | < 1.7.1 | 1.7.1 |
| tensorflow-gpu | ≥ 1.5.0, < 1.7.1< 1.7.1 | 1.7.1 |
| tensorflow | ≤ 1.7.0 |
Google TensorFlow 1.7 and below is affected by: Buffer Overflow. The impact is: execute arbitrary code (local). Users passing a malformed or malicious version of a TFLite graph into TOCO will cause TOCO to crash or cause a buffer overflow, potentially allowing malicious code to be executed.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free