AI Security Threat Feed

DoS Supply Chain Framework Inference Model

TensorFlow Lite: DoS via crafted TFLite model file

DoS Supply Chain Framework Inference

TFLite: infinite loop DoS via crafted strided slice model

tensorflow CWE-835 3.7K 4 ATLAS

TensorFlow Lite: null ptr deref crashes SVDF inference

tensorflow 3.7K 4 ATLAS

DoS Supply Chain Framework Inference

TFLite: division by zero crashes fully connected layers

TensorFlow: null ptr deref in SparseFillEmptyRows op

MEDIUM EXPLOIT AVAIL

TensorFlow: DoS via division by zero in conv ops

DoS Framework Inference

DoS Code Execution Framework Training Data Inference

TensorFlow: null-ptr deref in Map ops, local C/I/A:High

TensorFlow: UnicodeEncode null deref, local code exec

Code Execution DoS Framework Training Data

TensorFlow: null-ptr deref in RaggedTensorToVariant op

Code Execution Framework Training Data

TensorFlow: double-free in BoostedTrees, code exec

tensorflow CWE-415 3.7K 3 ATLAS

Code Execution DoS Framework Training Data

TensorFlow SaveV2: null ptr deref, local crash/RCE

Data Extraction DoS Framework Training Data

TensorFlow: heap OOB read in BoostedTrees ops

tensorflow 3.7K 4 ATLAS

Code Execution DoS Framework Training Data

TensorFlow: null deref in BoostedTrees training ops

tensorflow CWE-681 3.7K 3 ATLAS

TensorFlow: integer sign conversion DoS in boosted trees

TensorFlow: heap OOB in cwise ops enables local RCE

DoS Code Execution Framework Inference

TensorFlow: null ptr deref in MatrixSetDiagV ops

TensorFlow: null ptr deref in MatrixDiagV ops

Code Execution DoS Framework Training Data Inference

TensorFlow: null ptr deref in RaggedTensorToSparse op

Data Extraction Code Execution Framework Training Data

TensorFlow: OOB heap read in ResourceScatterUpdate

DoS Data Extraction Framework Training Data

TensorFlow: OOB read/crash via ResourceGather batch_dims