tocsin

PyPI/tensorflow-gpu CVE-2022-21726: unknown, EPSS 0.83%

Tensorflow is an Open Source Machine Learning Framework. The implementation of `Dequantize` does not fully validate the value of `axis` and can result in heap OOB accesses. The `axis` argument can be

Action: Upgrade tensorflow-gpu to 2.5.3 or later.

pip install tensorflow-gpu==2.5.3
pip install tensorflow-gpu==2.6.3

Affected

introducedfixedlast affected
02.5.3-
2.6.02.6.3-

Fixed versions

2.5.32.6.3

Sources

CVE-2022-21726 · published · modified · JSON