Vulnerabilities > Google > Tensorflow > Medium

DATE CVE VULNERABILITY TITLE RISK
2020-01-28 CVE-2020-5215 Improper Input Validation vulnerability in Google Tensorflow
In TensorFlow before 1.15.2 and 2.0.1, converting a string (from Python) to a tf.float16 value results in a segmentation fault in eager mode as the format checks for this use case are only in the graph mode.
network
google CWE-20
4.3
2019-04-24 CVE-2019-9635 NULL Pointer Dereference vulnerability in Google Tensorflow
NULL pointer dereference in Google TensorFlow before 1.12.2 could cause a denial of service via an invalid GIF file.
network
google CWE-476
4.3
2019-04-24 CVE-2018-7577 Improper Input Validation vulnerability in Google Snappy and Tensorflow
Memcpy parameter overlap in Google Snappy library 1.1.4, as used in Google TensorFlow before 1.7.1, could result in a crash or read from other parts of process memory.
network
google CWE-20
5.8
2019-04-24 CVE-2018-10055 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Google Tensorflow
Invalid memory access and/or a heap buffer overflow in the TensorFlow XLA compiler in Google TensorFlow before 1.7.1 could cause a crash or read from other parts of process memory via a crafted configuration file.
network
google CWE-119
5.8
2019-04-23 CVE-2018-8825 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Google Tensorflow
Google TensorFlow 1.7 and below is affected by: Buffer Overflow.
network
google CWE-119
6.8
2019-04-23 CVE-2018-7576 NULL Pointer Dereference vulnerability in Google Tensorflow
Google TensorFlow 1.6.x and earlier is affected by: Null Pointer Dereference.
network
google CWE-476
4.3