CVE-2020-26266
Uninitialized memory access in Eigen types in TensorFlow
Vexday Risk Score
13Bajo
Decisión SSVC (CISA)
Track
Sin señal de explotación → monitorear
CVSS 4.4EPSS 0.2%KEV nãoPoC —Nuclei —Metasploit —Patch —
Ciclo de vida
10 dic 2020Publicada en NVD
Recomendación: Monitorear — sin señal de explotación por ahora.
In affected versions of TensorFlow under certain cases a saved model can trigger use of uninitialized values during code execution. This is caused by having tensor buffers be filled with the default value of the type but forgetting to default initialize the quantized floating point types in Eigen. This is fixed in versions 1.15.5, 2.0.4, 2.1.3, 2.2.2, 2.3.2, and 2.4.0.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
Productos afectados
tensorflow · tensorflow¿Quieres saber si tu infraestructura está expuesta a esto?
Hablar con TrueHacking →