One Article Review
| Source |  CVE Liste |
|---|---|
| Identifiant | 3617857 |
| Date de publication | 2021-11-05 23:15:08 (vue: 2021-11-06 01:05:57) |
| Titre | CVE-2021-41227 |
| Texte | TensorFlow is an open source platform for machine learning. In affected versions the `ImmutableConst` operation in TensorFlow can be tricked into reading arbitrary memory contents. This is because the `tstring` TensorFlow string class has a special case for memory mapped strings but the operation itself does not offer any support for this datatype. The fix will be included in TensorFlow 2.7.0. We will also cherrypick this commit on TensorFlow 2.6.1, TensorFlow 2.5.2, and TensorFlow 2.4.4, as these are also affected and still in supported range. |
| Envoyé | Oui |
| Condensat | 2021 41227 `immutableconst` `tstring` affected also any arbitrary are because but can case cherrypick class commit contents cve datatype does fix has included itself learning machine mapped memory not offer open operation platform range reading source special string strings support supported tensorflow these tricked versions will |
| Tags | |
| Stories | |
| Notes | |
| Move | 
|
L'article ne semble pas avoir été repris aprés sa publication.
L'article ne semble pas avoir été repris sur un précédent.