{"action":"Upgrade tensorflow to 1.7.0 or later.","affected":[{"fixed":"1.7.0","introduced":"0"}],"component":"tensorflow","cve_ids":["CVE-2018-21233"],"ecosystem":"PyPI","epss":0.00584,"exploited":false,"fixed_versions":["1.7.0"],"ghsa_id":"GHSA-h98h-8mxr-m8gx","id":"tcs_01M5KGA2C5F58TYBBN7Z495J48","modified_at":"2023-11-08T04:00:14.358694Z","published_at":"2020-05-04T15:15:00Z","references":["https://osv.dev/vulnerability/PYSEC-2020-253","https://github.com/tensorflow/tensorflow/commit/49f73c55d56edffebde4bca4a407ad69c1cae433","https://github.com/tensorflow/tensorflow/blob/master/tensorflow/security/advisory/tfsa-2018-001.md","https://github.com/advisories/GHSA-h98h-8mxr-m8gx"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2020-253","url":"https://osv.dev/vulnerability/PYSEC-2020-253"}],"summary":"TensorFlow before 1.7.0 has an integer overflow that causes an out-of-bounds read, possibly causing disclosure of the contents of process memory. This occurs in the DecodeBmp feature of the BMP decode"}