What is GHSA-mfg7-x5m7-6p8w?

GHSA-mfg7-x5m7-6p8w is a security advisory published by GitHub Security Advisories with High severity. NULL Pointer Dereference in Google TensorFlow

Which CVE IDs does GHSA-mfg7-x5m7-6p8w cover?

GHSA-mfg7-x5m7-6p8w covers the following CVE IDs: CVE-2019-9635. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-mfg7-x5m7-6p8w?

GHSA-mfg7-x5m7-6p8w has a CVSS v3 base score of 6.5, published by GitHub Security Advisories.

Which products are affected by GHSA-mfg7-x5m7-6p8w?

GHSA-mfg7-x5m7-6p8w affects 2 products, including: pip/tensorflow:\u003e= 1.0.0, \u003c 1.12.1; pip/tensorflow-gpu:\u003e= 1.0.0, \u003c 1.12.1.

GHSA-mfg7-x5m7-6p8wHighCVSS 6.5

NULL Pointer Dereference in Google TensorFlow

Vendor

GitHub Security Advisories

Published

April 30, 2019

Last Modified

October 28, 2024

🔗 CVE IDs covered (1)

CVE-2019-9635 →

📋 Description

NULL pointer dereference in Google TensorFlow before 1.12.1 could cause a denial of service via an invalid GIF file.

🎯 Affected products2

pip/tensorflow:>= 1.0.0, < 1.12.1
pip/tensorflow-gpu:>= 1.0.0, < 1.12.1

🔗 References (7)

https://nvd.nist.gov/vuln/detail/CVE-2019-9635
https://github.com/tensorflow/tensorflow/blob/master/tensorflow/security/advisory/tfsa-2019-001.md
https://github.com/tensorflow/tensorflow/commit/e41cb124cd0b325821af85cdacd9d8a12e206418
https://github.com/advisories/GHSA-mfg7-x5m7-6p8w
https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2019-228.yaml
https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2019-235.yaml
https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2019-210.yaml