Medium
CVE-2021-41197
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 427
Reset filters
Medium
CVE-2021-41196
Crash in `max_pool3d` when size argument is 0 or negative
Medium
CVE-2021-41195
Crash in `tf.math.segment_*` operations
Medium
CVE-2021-37690
Use after free and segfault in shape inference functions
Medium
CVE-2021-37692
Segfault on strings tensors with mistmatched dimensions, due to Go code
Medium
CVE-2021-37691
FPE in LSH in TFLite
Medium
CVE-2021-37687
Heap OOB in TFLite's `Gather*` implementations
Medium
CVE-2021-37685
Heap OOB in TFLite
Medium
CVE-2021-37684
FPE in TFLite pooling operations
Medium
CVE-2021-37683
FPE in TFLite division operations
Medium
CVE-2021-37682
Use of unitialized value in TFLite
High
CVE-2021-37679
Heap OOB in nested `tf.map_fn` with `RaggedTensor`s
High
CVE-2021-37678
Arbitrary code execution due to YAML deserialization
Medium
CVE-2021-37677
Missing validation in shape inference for `Dequantize`
Medium
CVE-2021-37674
Incomplete validation in `MaxPoolGrad`
Medium
CVE-2021-37673
`CHECK`-fail in `MapStage`
Medium
CVE-2021-37672
Heap OOB in `SdcaOptimizerV2`
Medium
CVE-2021-37670
Heap OOB in `UpperBound` and `LowerBound`
Medium
CVE-2021-37669
Crash in NMS ops caused by integer conversion to unsigned
Medium
CVE-2021-37668
FPE in `tf.raw_ops.UnravelIndex`
High
CVE-2021-37665
Incomplete validation in MKL requantization
High
CVE-2021-37663
Incomplete validation in `QuantizeV2`
High
CVE-2021-37689
Null pointer dereference in TFLite MLIR optimizations
High
CVE-2021-37688
Null pointer dereference in TFLite
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.