Staging Environment: Content and features may be unstable or change without notice.

Advisory Package Curation

GHSA-q492-f7gr-27rp

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-q492-f7gr-27rp

Improper Restriction of Operations within the Bounds of a Memory Buffer in Google TensorFlow Invalid memory access and/or a heap buffer overflow in the TensorFlow XLA compiler in Google TensorFlow before 1.7.1 could cause a crash or read from other parts of process memory via a crafted configuration file.

gitlab/pypi/tensorflow/CVE-2018-10055

Improper Restriction of Operations within the Bounds of a Memory Buffer in Google TensorFlow Invalid memory access and/or a heap buffer overflow in the TensorFlow XLA compiler in Google TensorFlow before 1.7.1 could cause a crash or read from other parts of process memory via a crafted configuration file.

gitlab/pypi/tensorflow-gpu/CVE-2018-10055

Improper Restriction of Operations within the Bounds of a Memory Buffer in Google TensorFlow Invalid memory access and/or a heap buffer overflow in the TensorFlow XLA compiler in Google TensorFlow before 1.7.1 could cause a crash or read from other parts of process memory via a crafted configuration file.

pypa/tensorflow-gpu/PYSEC-2019-229

Invalid memory access and/or a heap buffer overflow in the TensorFlow XLA compiler in Google TensorFlow before 1.7.1 could cause a crash or read from other parts of process memory via a crafted configuration file.

pypa/tensorflow/PYSEC-2019-204

Invalid memory access and/or a heap buffer overflow in the TensorFlow XLA compiler in Google TensorFlow before 1.7.1 could cause a crash or read from other parts of process memory via a crafted configuration file.

pysec/PYSEC-2019-204

Invalid memory access and/or a heap buffer overflow in the TensorFlow XLA compiler in Google TensorFlow before 1.7.1 could cause a crash or read from other parts of process memory via a crafted configuration file.

pysec/PYSEC-2019-229

Invalid memory access and/or a heap buffer overflow in the TensorFlow XLA compiler in Google TensorFlow before 1.7.1 could cause a crash or read from other parts of process memory via a crafted configuration file.