AI Security Threat Feed

DoS Code Execution Framework Training Data

TensorFlow: use-after-free crashes training processes

tensorflow CWE-20 3.7K 2 ATLAS

TensorFlow: string tensor GC segfault causes process DoS

DoS Supply Chain Framework Inference

TensorFlow TFLite: DoS via crafted model in LSH kernel

tensorflow CWE-369 3.7K 3 ATLAS

Data Extraction Supply Chain Framework Inference

TFLite: heap OOB read via negative indices in GatherNd

tensorflow 3.7K 4 ATLAS

Data Extraction Privacy Violation Framework Inference

TensorFlow Lite: OOB read leaks heap memory in expand_dims

TensorFlow TFLite: DoS via division by zero in pooling

TFLite: division by zero DoS in inference kernels

tensorflow CWE-369 3.7K 3 ATLAS

Code Execution DoS Supply Chain Framework Inference

TFLite: uninitialized quant params corrupt inference

Data Leakage Code Execution Framework Training Data

TensorFlow: heap over-read leaks memory via RaggedTensor

tensorflow CWE-681 3.7K 3 ATLAS

HIGH EXPLOIT AVAIL

TensorFlow/Keras: RCE via YAML model deserialization

Code Execution Supply Chain Framework Model

tensorflow CWE-502 3.7K 4 ATLAS

TensorFlow: DoS via invalid Dequantize axis argument

tensorflow CWE-1284 3.7K 3 ATLAS

DoS Framework Training Data

TensorFlow: DoS via MaxPoolGrad invalid tensor input

tensorflow CWE-1284 3.7K 2 ATLAS

DoS Framework Training Data Inference

TensorFlow: MapStage CHECK-fail causes process DoS

Data Extraction Privacy Violation Framework Training Data

TensorFlow: heap OOB read in SdcaOptimizerV2

Data Extraction Supply Chain Framework Training Data

TensorFlow: heap OOB read in sorting ops

TensorFlow: integer conversion DoS in NonMaxSuppression ops

TensorFlow: DoS via div-by-zero in UnravelIndex op

tensorflow CWE-369 3.7K 3 ATLAS

Code Execution DoS Framework Inference

TensorFlow MKL: null-ptr/heap-OOB in requantization ops

Code Execution DoS Framework Training Data Inference

TensorFlow: QuantizeV2 heap OOB/null-deref in quantization