A vulnerability was found in Google TensorFlow up to 2.4.2/2.5.0 (Artificial Intelligence Software) and classified as critical. This issue affects the function tf.raw_ops.QuantizeAndDequantizeV4Grad. Upgrading to version 2.4.3, 2.5.1 or 2.6.0 eliminates this vulnerability. Applying a patch is able to eliminate this problem. The bugfix is ready for download at github.com. The best possible mitigation is suggested to be upgrading to the latest version.
Google TensorFlow up to 2.4.2/2.5.0 tf.raw_ops.QuantizeAndDequantizeV4Grad size numeric conversion
- Virtual Patching
- August 13, 2021
- 6:04 am
- Virtual Patching
- August 13, 2021
- 6:04 am
Common Vulnerabilityies and Exposures
Contact us to get started
CVE-2024-8523 : LMXCMS UP TO 1.4 SQL COMMAND EXECUTION MODULE ADMIN.PHP FORMATDATA DATA CODE INJECTION
Description A vulnerability was found in lmxcms up to 1.4 and classified as critical. Affected by this issue is the
CVE-2024-25584 : OPEN-XCHANGE OX DOVECOT PRO UP TO 2.3.21 DATA COMMAND DATA AUTHENTICITY
Description Dovecot accepts dot LF DOT LF symbol as end of DATA command. RFC requires that it should always be
CVE-2024-8521 : WAVELOG UP TO 1.8.0 LIVE QSO /QSO INDEX MANUAL CROSS SITE SCRIPTING
Description A vulnerability, which was classified as problematic, was found in Wavelog up to 1.8.0. Affected is the function index