AI Security Threat Feed

Supply Chain Code Execution DoS Framework Training Data

TensorFlow: malformed checkpoint triggers overflow/crash

tensorflow CWE-190 3.7K 4 ATLAS

Data Extraction Code Execution DoS Framework Training Data

TensorFlow: heap OOB read in SparseCountSparseOutput

tensorflow CWE-125 3.7K 3 ATLAS

Code Execution Framework Inference

TensorFlow: uninitialized var in Einsum allows local RCE

tensorflow CWE-824 3.7K 3 ATLAS

DoS Framework Training Data

TensorFlow: DoS crash in tf.summary file writer

tensorflow CWE-617 3.7K 3 ATLAS

TensorFlow: tf.image.resize integer overflow DoS

DoS Framework Inference Training Data

TensorFlow: tf.tile integer overflow crashes ML process

TensorFlow: integer overflow in tensor dims causes DoS

TensorFlow: integer underflow crashes Keras pooling layers

tensorflow CWE-191 3.7K 3 ATLAS

TensorFlow: integer overflow in segment ops causes DoS

Code Execution Supply Chain Framework Training Data

HIGH

nbgitpuller: RCE via OS command injection in git URLs

CWE-78 5 ATLAS

DoS Code Execution Framework Training Data

TensorFlow: use-after-free crashes training processes

tensorflow CWE-20 3.7K 2 ATLAS

TensorFlow: string tensor GC segfault causes process DoS

DoS Supply Chain Framework Inference

TensorFlow TFLite: DoS via crafted model in LSH kernel

tensorflow CWE-369 3.7K 3 ATLAS

Data Extraction Supply Chain Framework Inference

TFLite: heap OOB read via negative indices in GatherNd

tensorflow 3.7K 4 ATLAS

Data Extraction Privacy Violation Framework Inference

TensorFlow Lite: OOB read leaks heap memory in expand_dims

TensorFlow TFLite: DoS via division by zero in pooling

TFLite: division by zero DoS in inference kernels

tensorflow CWE-369 3.7K 3 ATLAS

HIGH

TFLite: uninitialized quant params corrupt inference

Code Execution DoS Supply Chain Framework Inference

Data Leakage Code Execution Framework Training Data

HIGH

TensorFlow: heap over-read leaks memory via RaggedTensor

tensorflow CWE-681 3.7K 3 ATLAS