Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 443
Reset filtersFPE in TFLite division operations
Use of unitialized value in TFLite
Heap OOB in nested `tf.map_fn` with `RaggedTensor`s
Arbitrary code execution due to YAML deserialization
Missing validation in shape inference for `Dequantize`
Incomplete validation in `MaxPoolGrad`
`CHECK`-fail in `MapStage`
Heap OOB in `SdcaOptimizerV2`
Heap OOB in `UpperBound` and `LowerBound`
Crash in NMS ops caused by integer conversion to unsigned
FPE in `tf.raw_ops.UnravelIndex`
Incomplete validation in MKL requantization
Incomplete validation in `QuantizeV2`
Null pointer dereference in TFLite MLIR optimizations
Null pointer dereference in TFLite
Infinite loop in TFLite
NPE in TFLite
Division by zero in TFLite
Reference binding to nullptr in shape inference
Division by 0 in most convolution operators
Reference binding to nullptr in map operations
Reference binding to nullptr in unicode encoding
Reference binding to nullptr in `RaggedTensorToVariant`
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.