BIT-tensorflow-2020-26266

See a problem?

Import Source

https://github.com/bitnami/vulndb/tree/main/data/tensorflow/BIT-tensorflow-2020-26266.json

JSON Data

https://api.osv.dev/v1/vulns/BIT-tensorflow-2020-26266

Aliases

Published

2024-03-06T11:20:18.700Z

Modified

2024-11-27T19:40:48.342Z

Summary

[none]

Details

In affected versions of TensorFlow under certain cases a saved model can trigger use of uninitialized values during code execution. This is caused by having tensor buffers be filled with the default value of the type but forgetting to default initialize the quantized floating point types in Eigen. This is fixed in versions 1.15.5, 2.0.4, 2.1.3, 2.2.2, 2.3.2, and 2.4.0.

Database specific

{
    "cpes": [
        "cpe:2.3:a:google:tensorflow:*:*:*:*:*:*:*:*"
    ],
    "severity": "Medium"
}

References

Affected packages

Bitnami / tensorflow

Package

Name: tensorflow
Purl: pkg:bitnami/tensorflow

Severity

4.4 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L CVSS Calculator

Affected ranges

Type: SEMVER
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.15.5

Introduced

2.0.0

Fixed

2.0.4

Introduced

2.1.0

Fixed

2.1.3

Introduced

2.2.0

Fixed

2.2.2

Introduced

2.3.0

Fixed

2.3.2