Fluid Attacks Database

Description

NULL Pointer Dereference in Google TensorFlow NULL pointer dereference in Google TensorFlow before 1.12.1 could cause a denial of service via an invalid GIF file.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Component	Affected version	Patched versions
pypi	tensorflow-gpu	>=1.0.0 <1.12.1	1.12.1
pypi	tensorflow-cpu	>=0 <1.12.2	1.12.2
pypi	tensorflow	>=1.0.0 <1.12.1	1.12.1

Aliases

1. CVE-2019-96352. NVD-2019-96353. OSV-2019-96354. OSV-PYSEC-2019-2285. GHSA-mfg7-x5m7-6p8w6. GCVE-2019-96357. https://github.com/tensorflow/tensorflow/blob/master/tensorflow/security/advisory/tfsa-2019-001.md

References

1. https://github.com/tensorflow/tensorflow/commit/e41cb124cd0b325821af85cdacd9d8a12e2064182. https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2019-228.yaml3. https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2019-235.yaml4. https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2019-210.yaml5. https://github.com/tensorflow/tensorflow/blob/master/tensorflow/security/advisory/tfsa-2019-001.md

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.