PyPI/tensorflow-cpu CVE-2020-15212: unknown, EPSS 0.74%
In TensorFlow Lite before versions 2.2.1 and 2.3.1, models using segment sum can trigger writes outside of bounds of heap allocated buffers by inserting negative elements in the segment ids tensor. Us
Action: Upgrade tensorflow-cpu to 2.2.1 or later.
pip install tensorflow-cpu==2.3.1pip install tensorflow-cpu==2.2.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.2.0 | 2.2.1 | - |
| 2.3.0 | 2.3.1 | - |
Fixed versions
| 2.3.1 | 2.2.1 |
Sources
- osv: PYSEC-2020-292
- https://github.com/tensorflow/tensorflow/security/advisories/GHSA-hx2x-85gr-wrpq
- https://github.com/tensorflow/tensorflow/releases/tag/v2.3.1
- https://github.com/tensorflow/tensorflow/commit/204945b19e44b57906c9344c0d00120eeeae178a
CVE-2020-15212 · published · modified · JSON