CVE-2020-15266: Float cast overflow undefined behavior
(updated )
When the boxes argument of tf.image.crop_and_resize has a very large value, the CPU kernel implementation receives it as a C++ nan floating point value. Attempting to operate on this is undefined behavior which later produces a segmentation fault.
References
- github.com/advisories/GHSA-xwhf-g6j5-j5gc
- github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2020-296.yaml
- github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2020-331.yaml
- github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2020-139.yaml
- github.com/tensorflow/tensorflow
- github.com/tensorflow/tensorflow/issues/42129
- github.com/tensorflow/tensorflow/pull/42143/commits/3ade2efec2e90c6237de32a19680caaa3ebc2845
- github.com/tensorflow/tensorflow/security/advisories/GHSA-xwhf-g6j5-j5gc
- nvd.nist.gov/vuln/detail/CVE-2020-15266
Code Behaviors & Features
Detect and mitigate CVE-2020-15266 with GitLab Dependency Scanning
Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →