{"action":"Upgrade tensorflow-gpu to 1.7.0 or later.","affected":[{"fixed":"1.7.0","introduced":"0"}],"component":"tensorflow-gpu","cve_ids":["CVE-2018-21233"],"ecosystem":"PyPI","epss":0.00584,"exploited":false,"fixed_versions":["1.7.0"],"ghsa_id":"GHSA-h98h-8mxr-m8gx","id":"tcs_01M5KGACKJVG5T97XA207B80E8","modified_at":"2026-06-10T17:01:18.606647789Z","published_at":"2020-05-04T15:15:00Z","references":["https://osv.dev/vulnerability/PYSEC-2020-304","https://github.com/tensorflow/tensorflow/commit/49f73c55d56edffebde4bca4a407ad69c1cae433","https://github.com/tensorflow/tensorflow/blob/master/tensorflow/security/advisory/tfsa-2018-001.md","https://github.com/advisories/GHSA-h98h-8mxr-m8gx"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2020-304","url":"https://osv.dev/vulnerability/PYSEC-2020-304"}],"summary":"TensorFlow before 1.7.0 has an integer overflow that causes an out-of-bounds read, possibly causing disclosure of the contents of process memory. This occurs in the DecodeBmp feature of the BMP decode"}