Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 443
Reset filtersIncorrect validation of `SaveV2` inputs
Heap OOB in boosted trees
Reference binding to nullptr in boosted trees
Crash caused by integer conversion to unsigned
Reference binding to nullptr and heap OOB in binary cwise ops
Reference binding to nullptr in `MatrixSetDiagV*` ops
Reference binding to nullptr in `MatrixDiagV*` ops
Reference binding to nullptr in `RaggedTensorToSparse`
Heap OOB in `ResourceScatterUpdate`
Heap OOB and CHECK fail in `ResourceGather`
Heap buffer overflow in `FractionalAvgPoolGrad`
Segfault and heap buffer overflow in `{Experimental,}DatasetToTFRecord`
Bad alloc in `StringNGrams` caused by integer conversion
Integer overflow due to conversion to unsigned
`std::abort` raised from `TensorListReserve`
Heap OOB in `RaggedGather`
Heap out of bounds access in sparse reduction operations
Null pointer dereference in `UncompressElement`
Null pointer dereference in `SparseTensorSliceDataset`
Null pointer dereference in `MatrixDiagPartOp`
Null pointer dereference and heap OOB read in operations restoring tensors
Null pointer dereference in `RaggedTensorToTensor`
Null pointer dereference in `CompressElement`
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.