PYSEC-2020-269
See a problem?- Import Source
- https://github.com/pypa/advisory-database/blob/main/vulns/tensorflow-cpu/PYSEC-2020-269.yaml
- JSON Data
- https://api.test.osv.dev/v1/vulns/PYSEC-2020-269
- Aliases
- Published
- 2020-05-04T15:15:00Z
- Modified
- 2023-11-01T04:49:24.162522Z
- Summary
- [none]
- Details
-
TensorFlow before 1.7.0 has an integer overflow that causes an out-of-bounds read, possibly causing disclosure of the contents of process memory. This occurs in the DecodeBmp feature of the BMP decoder in core/kernels/decodebmpop.cc.
- References
Affected packages
PyPI / tensorflow-cpu
Package
- Name
- tensorflow-cpu
- View open source insights on deps.dev
- Purl
- pkg:pypi/tensorflow-cpu