Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 427
Reset filtersNPE in TFLite
Division by zero in TFLite
Reference binding to nullptr in shape inference
Division by 0 in most convolution operators
Reference binding to nullptr in map operations
Reference binding to nullptr in unicode encoding
Reference binding to nullptr in `RaggedTensorToVariant`
Use after free in boosted trees creation
Incorrect validation of `SaveV2` inputs
Heap OOB in boosted trees
Reference binding to nullptr in boosted trees
Crash caused by integer conversion to unsigned
Reference binding to nullptr and heap OOB in binary cwise ops
Reference binding to nullptr in `MatrixSetDiagV*` ops
Reference binding to nullptr in `MatrixDiagV*` ops
Reference binding to nullptr in `RaggedTensorToSparse`
Heap OOB in `ResourceScatterUpdate`
Heap OOB and CHECK fail in `ResourceGather`
Heap buffer overflow in `FractionalAvgPoolGrad`
Segfault and heap buffer overflow in `{Experimental,}DatasetToTFRecord`
Bad alloc in `StringNGrams` caused by integer conversion
Integer overflow due to conversion to unsigned
`std::abort` raised from `TensorListReserve`
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.