Medium
CVE-2021-41213
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 427
Reset filters
Medium
CVE-2021-41218
Integer division by 0 in `tf.raw_ops.AllToAll`
Medium
CVE-2021-41209
FPE in convolutions with zero size filters
Critical
CVE-2021-41208
Incomplete validation in boosted trees code
Medium
CVE-2021-41207
FPE in `ParallelConcat`
High
CVE-2021-41206
Incomplete validation of shapes in multiple TF ops
Medium
CVE-2021-41202
Overflow/crash in `tf.range`
Medium
CVE-2021-41226
Heap OOB in `SparseBinCount`
Medium
CVE-2021-41224
`SparseFillEmptyRows` heap OOB
Medium
CVE-2021-41223
Heap OOB in `FusedBatchNorm` kernels
High
CVE-2021-41219
Undefined behavior via `nullptr` reference binding in sparse matrix multiplication
Medium
CVE-2021-41217
Null pointer exception when `Exit` node is not preceded by `Enter` op
Medium
CVE-2021-41215
Null pointer exception in `DeserializeSparse`
High
CVE-2021-41214
Reference binding to `nullptr` in `tf.ragged.cross`
High
CVE-2021-41212
Heap OOB read in `tf.ragged.cross`
High
CVE-2021-41211
Heap OOB in shape inference for `QuantizeV2`
Medium
CVE-2021-41205
Heap OOB read in all `tf.raw_ops.QuantizeAndDequantizeV*` ops
Medium
CVE-2021-41204
Segfault while copying constant resource tensor
High
CVE-2021-41203
Missing validation during checkpoint loading
High
CVE-2021-41210
Heap OOB read in `tf.raw_ops.SparseCountSparseOutput`
High
CVE-2021-41201
Unitialized access in `EinsumHelper::ParseEquation`
Medium
CVE-2021-41200
Incomplete validation in `tf.summary.create_file_writer`
Medium
CVE-2021-41199
Overflow/crash in `tf.image.resize` when size is large
Medium
CVE-2021-41198
Overflow/crash in `tf.tile` when tiling tensor is large
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.