{"action":"Upgrade tensorflow-cpu to 1.7.0 or later.","affected":[{"fixed":"1.7.0","introduced":"0"}],"component":"tensorflow-cpu","cve_ids":["CVE-2018-21233"],"ecosystem":"PyPI","epss":0.00584,"exploited":false,"fixed_versions":["1.7.0"],"ghsa_id":"GHSA-h98h-8mxr-m8gx","id":"tcs_01M5KGA5CG0KCA3R2YNJPQQNSK","modified_at":"2023-11-08T04:00:14.358694Z","published_at":"2020-05-04T15:15:00Z","references":["https://osv.dev/vulnerability/PYSEC-2020-269","https://github.com/tensorflow/tensorflow/commit/49f73c55d56edffebde4bca4a407ad69c1cae433","https://github.com/tensorflow/tensorflow/blob/master/tensorflow/security/advisory/tfsa-2018-001.md"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2020-269","url":"https://osv.dev/vulnerability/PYSEC-2020-269"}],"summary":"TensorFlow before 1.7.0 has an integer overflow that causes an out-of-bounds read, possibly causing disclosure of the contents of process memory. This occurs in the DecodeBmp feature of the BMP decode"}