Medium
CVE-2021-37646
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 430
Reset filters
Medium
CVE-2021-37645
Integer overflow due to conversion to unsigned
Medium
CVE-2021-37644
`std::abort` raised from `TensorListReserve`
Medium
CVE-2021-37641
Heap OOB in `RaggedGather`
High
CVE-2021-37635
Heap out of bounds access in sparse reduction operations
High
CVE-2021-37649
Null pointer dereference in `UncompressElement`
High
CVE-2021-37647
Null pointer dereference in `SparseTensorSliceDataset`
High
CVE-2021-37643
Null pointer dereference in `MatrixDiagPartOp`
High
CVE-2021-37639
Null pointer dereference and heap OOB read in operations restoring tensors
High
CVE-2021-37638
Null pointer dereference in `RaggedTensorToTensor`
High
CVE-2021-37637
Null pointer dereference in `CompressElement`
Medium
CVE-2021-37660
Division by 0 in inplace operations
Medium
CVE-2021-37653
Division by 0 in `ResourceGather`
Medium
CVE-2021-37642
Division by 0 in `ResourceScatterDiv`
Medium
CVE-2021-37640
Integer division by 0 in sparse reshaping
Medium
CVE-2021-37636
Floating point exception in `SparseDenseCwiseDiv`
Low
CVE-2021-29619
Segfault in `tf.raw_ops.SparseCountSparseOutput`
Low
CVE-2021-29618
Crash in `tf.transpose` with complex inputs
Low
CVE-2021-29617
Crash in `tf.strings.substr` due to `CHECK`-fail
Low
CVE-2021-29616
Null dereference in Grappler's `TrySimplify`
Low
CVE-2021-29615
Stack overflow in `ParseAttrValue` with nested tensors
Medium
CVE-2021-29614
Interpreter crash from `tf.io.decode_raw`
Medium
CVE-2021-29613
Incomplete validation in `tf.raw_ops.CTCLoss`
Low
CVE-2021-29612
Heap buffer overflow in `BandedTriangularSolve`
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.