CVE-2018-21233

TensorFlow before 1.7.0 has an integer overflow that causes an out-of-bounds read, possibly causing disclosure of the contents of process memory

published May 4, 2020

CVSS
—
EPSS
1%
Percentile
47.2
In the wild
Unconfirmed
What it is

TensorFlow before 1.7.0 has an integer overflow that causes an out-of-bounds read, possibly causing disclosure of the contents of process memory. This occurs in the DecodeBmp feature of the BMP decoder in core/kernels/decode_bmp_op.cc.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00584 · 47.2th percentile
Published
2020-05-04T14:12Z
EPSS history
Timeline
  • 04 MAY 14:12Z
    TensorFlow before 1.7.0 has an integer overflow that causes an out-of-bounds read, possibly causing disclosure of the contents of process memory
    cvelistv5