Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
`CHECK` fail in `BCast` overflow in Tensorflow
Vulnerability Description
TensorFlow is an open source platform for machine learning. If `BCast::ToShape` is given input larger than an `int32`, it will crash, despite being supposed to handle up to an `int64`. An example can be seen in `tf.experimental.numpy.outer` by passing in large input to the input `b`. We have patched the issue in GitHub commit 8310bf8dd188ff780e7fc53245058215a05bdbe5. The fix will be included in TensorFlow 2.11. We will also cherrypick this commit on TensorFlow 2.10.1, 2.9.3, and TensorFlow 2.8.4, as these are also affected and still in supported range.
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H
Vulnerability Type
不正确的类型转换
Vulnerability Title
Google TensorFlow 代码问题漏洞
Vulnerability Description
Google TensorFlow是美国谷歌（Google）公司的一套用于机器学习的端到端开源平台。 Google TensorFlow 2.11 版本，2.10.1 版本之前的 2.10.x 版本，2.9.3 版本之前的 2.9.x 版本，2.8.4 版本之前的 2.8.x 版本存在代码问题漏洞，该漏洞源于如果 BCast::ToShape 的输入大于 int32，它将崩溃，尽管它应该处理最大 int64。通过将大输入传递给输入“b”，可以在“tf.experimental.numpy.outer”中看
CVSS Information
N/A
Vulnerability Type
N/A