Medium
CVE-2021-41224
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 443
Reset filters
Medium
CVE-2021-41223
Heap OOB in `FusedBatchNorm` kernels
High
CVE-2021-41219
Undefined behavior via `nullptr` reference binding in sparse matrix multiplication
Medium
CVE-2021-41217
Null pointer exception when `Exit` node is not preceded by `Enter` op
Medium
CVE-2021-41215
Null pointer exception in `DeserializeSparse`
High
CVE-2021-41214
Reference binding to `nullptr` in `tf.ragged.cross`
High
CVE-2021-41212
Heap OOB read in `tf.ragged.cross`
High
CVE-2021-41211
Heap OOB in shape inference for `QuantizeV2`
Medium
CVE-2021-41205
Heap OOB read in all `tf.raw_ops.QuantizeAndDequantizeV*` ops
Medium
CVE-2021-41204
Segfault while copying constant resource tensor
High
CVE-2021-41203
Missing validation during checkpoint loading
High
CVE-2021-41210
Heap OOB read in `tf.raw_ops.SparseCountSparseOutput`
High
CVE-2021-41201
Unitialized access in `EinsumHelper::ParseEquation`
Medium
CVE-2021-41200
Incomplete validation in `tf.summary.create_file_writer`
Medium
CVE-2021-41199
Overflow/crash in `tf.image.resize` when size is large
Medium
CVE-2021-41198
Overflow/crash in `tf.tile` when tiling tensor is large
Medium
CVE-2021-41197
Crashes due to overflow and `CHECK`-fail in ops with large tensor shapes
Medium
CVE-2021-41196
Crash in `max_pool3d` when size argument is 0 or negative
Medium
CVE-2021-41195
Crash in `tf.math.segment_*` operations
Medium
CVE-2021-37690
Use after free and segfault in shape inference functions
Medium
CVE-2021-37692
Segfault on strings tensors with mistmatched dimensions, due to Go code
Medium
CVE-2021-37691
FPE in LSH in TFLite
Medium
CVE-2021-37687
Heap OOB in TFLite's `Gather*` implementations
Medium
CVE-2021-37685
Heap OOB in TFLite
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.