AI Security Threat Feed

Code Execution Model Poisoning Framework Training Data

TensorFlow: use-after-free in async collective ops

tensorflow CWE-787 3.7K 3 ATLAS

TensorFlow: heap overflow in Transpose via negative perm

Code Execution Framework

DoS Supply Chain Framework Model

TensorFlow: tf.function deadlock enables DoS via model load

tensorflow CWE-662 3.7K 4 ATLAS

MEDIUM

TensorFlow: AllToAll DoS via divide-by-zero crash

DoS Framework Training Data

TensorFlow: DoS via division-by-zero in conv ops

DoS Framework Inference

DoS Code Execution Framework Training Data

TensorFlow: heap R/W + DoS in boosted trees APIs

tensorflow CWE-476 3.7K 4 ATLAS

tensorflow CWE-369 3.7K 3 ATLAS

TensorFlow: ParallelConcat div-by-zero crashes ML process

TensorFlow: missing shape validation allows heap R/W

Code Execution Framework

tensorflow 3.7K 2 ATLAS

DoS Framework Training Data

TensorFlow tf.range: integer overflow in kernel causes DoS

Code Execution DoS Data Extraction Framework Training Data Inference

TensorFlow: heap OOB in SparseBinCount, crash/disclosure

Code Execution DoS Framework Training Data

TensorFlow: heap OOB read in SparseFillEmptyRows op

Data Leakage DoS Framework Training Data

TensorFlow: FusedBatchNorm heap OOB allows data leak/crash

Code Execution DoS Framework Training Data

TensorFlow: heap OOB in sparse matrix multiply

DoS Supply Chain Framework Model Inference

TensorFlow: null pointer crash in control flow graph

tensorflow CWE-476 3.7K 4 ATLAS

tensorflow CWE-476 3.7K 3 ATLAS

TensorFlow: DeserializeSparse null deref causes DoS

DoS Framework Inference

tensorflow CWE-824 3.7K 2 ATLAS

TensorFlow: null deref in ragged ops, local RCE

Code Execution Framework

DoS Data Extraction Code Execution Framework Training Data Inference

TensorFlow: heap OOB read in ragged.cross shape inference

Data Extraction DoS Framework Training Data Inference

TensorFlow: heap OOB read in QuantizeV2 shape inference

DoS Data Leakage Framework Training Data Inference

TensorFlow: heap OOB read in quantize ops, DoS+leak