Null pointer dereference in TensorFlow leads to exploitation · CVE-2018-7576 · GitHub Advisory Database · GitHub

Null pointer dereference in TensorFlow leads to exploitation

Moderate severity GitHub Reviewed Published Apr 24, 2019 to the GitHub Advisory Database • Updated Aug 26, 2024

Package

tensorflow (pip)

Affected versions

>= 1.0.0, < 1.6.0

Patched versions

1.6.0

tensorflow-gpu (pip)

>= 1.0.0, < 1.6.0

1.6.0

Description

Google TensorFlow 1.0.0 through 1.5.1 is affected by: Null Pointer Dereference. The type of exploitation is: context-dependent.

References

Reviewed Apr 24, 2019

Published to the GitHub Advisory Database Apr 24, 2019

Last updated Aug 26, 2024