AI Security Threat Feed

TensorFlow: FPE in AudioSpectrogram causes DoS

TensorFlow: null ptr deref DoS via sparse tensors

Code Execution Supply Chain Framework Inference

TensorFlow: heap overflow in AvgPoolGrad, RCE risk

tensorflow 3.7K 4 ATLAS

TensorFlow: null ptr deref crashes inference serving

TensorFlow: integer overflow in EditDistance causes DoS

TensorFlow: null ptr deref in Print op allows remote DoS

TensorFlow: OOB read in DynamicStitch enables DoS

DoS Code Execution Framework Inference Training Data

TensorFlow: OOB read in GRUBlockCellGrad causes DoS

tensorflow 3.7K 4 ATLAS

CRITICAL KEV SCANNER

MLflow: path traversal allows arbitrary file read/write

Data Extraction Code Execution Supply Chain Framework Model Training Data

mlflow 624 7 ATLAS

LOW EXPLOIT AVAIL

MLflow: path traversal exposes arbitrary local files

Data Extraction Data Leakage Framework

mlflow 624 4 ATLAS

MEDIUM

Streamlit: reflected XSS enables session hijacking

Code Execution Data Leakage Framework

streamlit 2.8K 3 ATLAS

Auth Bypass Data Extraction Privacy Violation Framework Inference

Gradio: hardcoded SSH key leaks via share=True demos

gradio CWE-798 679 5 ATLAS

CRITICAL

TensorFlow Grappler: OOB read crashes or leaks memory

Code Execution DoS Data Extraction Framework Inference Training Data

DoS Data Extraction Framework Inference

TensorFlow Grappler: OOB read/crash via crafted model

tensorflow CWE-125 3.7K 4 ATLAS

Code Execution Supply Chain Framework Inference

PyTorch: RCE via unsafe eval in JIT annotations

pytorch CWE-94 21.9K 4 ATLAS

TensorFlow: type confusion DoS via bool cast in tensors

TensorFlow: remote DoS via malformed tensor input

tensorflow CWE-476 3.7K 3 ATLAS

TensorFlow: DoS via invalid UTF-8 input to PyFunc op

TensorFlow: integer overflow in ResizeNearestNeighborGrad → DoS

TensorFlow: DoS via SparseMatrixNNZ CHECK assertion fail