# TensorFlow Security Advisories
C++ fuzzing: [](https://bugs.chromium.org/p/oss-fuzz/issues/list?sort=-opened&can=1&q=proj:tensorflow)
Python fuzzing: [](https://bugs.chromium.org/p/oss-fuzz/issues/list?sort=-opened&can=1&q=proj:tensorflow-py)
We regularly publish security advisories about using TensorFlow.
*Note*: In conjunction with these security advisories, we strongly encourage
TensorFlow users to read and understand TensorFlow's security model as outlined
in
[SECURITY.md](https://github.com/tensorflow/tensorflow/blob/master/SECURITY.md).
| Advisory Number | Type | Versions affected | Reported by | Additional Information
| ------------------------------------------------------------------------------------------------------------------- | ---------------------------------------------------------------------------------- | :-----------------: | ---------------------------------------------------------------------------------- | --------------------------------------------------------------
| [TFSA-2023-020](https://github.com/tensorflow/tensorflow/blob/master/tensorflow/security/advisory/tfsa-2023-020.md) | OOB Read in GRUBlockCellGrad | <= 2.12.0 | r3pwnx of 360 AIVul Team |
| [TFSA-2023-019](https://github.com/tensorflow/tensorflow/blob/master/tensorflow/security/advisory/tfsa-2023-019.md) | FPE in AvgPoolGrad with XLA | <= 2.12.0 | r3pwnx of 360 AIVul Team |
| [TFSA-2023-018](https://github.com/tensorflow/tensorflow/blob/master/tensorflow/security/advisory/tfsa-2023-018.md) | OOB read in DynamicStitch | <= 2.12.0 | Google OSS VRP |
| [TFSA-2023-017](https://github.com/tensorflow/tensorflow/blob/master/tensorflow/security/advisory/tfsa-2023-017.md) | NPE in QuantizedMatMulWithBiasAndDequantize | <= 2.12.0 | r3pwnx of 360 AIVul Team |
| [TFSA-2023-016](https://github.com/tensorflow/tensorflow/blob/master/tensorflow/security/advisory/tfsa-2023-016.md) | Seg fault in `tf.raw_ops.Print` | <= 2.12.0 | Yu Tian of Qihoo 360 AIVul Team |
| [TFSA-2023-015](https://github.com/tensorflow/tensorflow/blob/master/tensorflow/security/advisory/tfsa-2023-015.md) | Segmentation fault in tfg-translate | <= 2.12.0 | r3pwnx of 360 AIVul Team |
| [TFSA-2023-014](https://github.com/tensorflow/tensorflow/blob/master/tensorflow/security/advisory/tfsa-2023-014.md) | Integer overflow in EditDistance | <= 2.12.0 | r3pwnx of 360 AIVul Team |
| [TFSA-2023-013](https://github.com/tensorflow/tensorflow/blob/master/tensorflow/security/advisory/tfsa-2023-013.md) | FPE in TensorListSplit with XLA | <= 2.12.0 | r3pwnx of 360 AIVul Team |
| [TFSA-2023-012](https://github.com/tensorflow/tensorflow/blob/master/tensorflow/security/advisory/tfsa-2023-012.md) | NPE in TensorArrayConcatV2 | <= 2.12.0 | Yu Tian of Qihoo 360 AIVul Team |
| [TFSA-2023-011](https://github.com/tensorflow/tensorflow/blob/master/tensorflow/security/advisory/tfsa-2023-011.md) | FPE in TensorListSplit with XLA | <= 2.12.0 | r3pwnx of 360 AIVul Team |
| [TFSA-2023-010](https://github.com/tensorflow/tensorflow/blob/master/tensorflow/security/advisory/tfsa-2023-010.md) | Heap-buffer-overflow in AvgPoolGrad | <= 2.12.0 | evn@google.com |
| [TFSA-2023-009](https://github.com/tensorflow/tensorflow/blob/master/tensorflow/security/advisory/tfsa-2023-009.md) | NPE in RandomShuffle with XLA enable | <= 2.12.0 | r3pwnx of 360 AIVul Team |
| [TFSA-2023-008](https://github.com/tensorflow/tensorflow/blob/master/tensorflow/security/advisory/tfsa-2023-008.md) | FPE in AudioSpectrogram | <= 2.12.0 | r3pwnx of 360 AIVul Team |
| [TFSA-2023-007](https://github.com/tensorflow/tensorflow/blob/master/tensorflow/security/advisory/tfsa-2023-007.md) | Segfault in Bincount with XLA | <= 2.12.0 | r3pwnx of 360 AIVul Team |
| [TFSA-2023-006](https://github.com/tensorflow/tensorflow/blob/master/tensorflow/security/advisory/tfsa-2023-006.md) | NPE in SparseSparseMaximum | <= 2.12.0 | Yu Tian of Qihoo 360 AIVul Team |
| [TFSA-2023-005](https://github.com/tensorflow/tensorflow/blob/master/tensorflow/security/advisory/tfsa-2023-005.md) | Null dereference on ParallelConcat with XLA | <= 2.12.0 | r3pwnx of 360 AIVul Team |
| [TFSA-2023-004](https://github.com/tensorflow/tensorflow/blob/master/tensorflow/security/advisory/tfsa-2023-004.md) | Segfault when opening multiframe gif | <= 2.12.0 | Andrei |
| [TFSA-2023-003](https://github.com/tensorflow/tensorflow/blob/master/tensorflow/security/advisory/tfsa-2023-003.md) | Double free in Fractional(Max/Avg)Pool | <= 2.12.0 | https://github.com/dmc1778 of nimashiri2012@gmail.com |
| [TFSA-2023-002](https://github.com/tensorflow/tensorflow/blob/master/tensorflow/security/advisory/tfsa-2023-002.md) | A heap out-of-buffer read vulnerability in the QuantizeAndDequantize operation | <= 2.12.0 | |
| [TFSA-2023-001](https://github.com/tensorflow/tensorflow/blob/master/tensorflow/security/advisory/tfsa-2023-001.md) | FPE in TFLite in conv kernel | <= 2.12.0 | Wang Xuan of Qihoo 360 AIVul Team |
| [TFSA-2022-170](https://github.com/tensorflow/tensorflow/blob/master/tensorflow/security/advisory/tfsa-2022-170.md) | `CHECK` fail in `TensorListScatter` and `TensorListScatterV2` in eager mode | <= 2.11.0 | Pattarakrit Rattankul |
| [TFSA-2022-169](https://github.com/tensorflow/tensorflow/blob/master/tensorflow/security/advisory/tfsa-2022-169.md) | `CHECK` failure in `SobolSample` via missing validation | <= 2.11.0 | (multiple authors) |
| [TFSA-2022-168](https://github.com/tensorflow/tensorflow/blob/master/tensorflow/security/advisory/tfsa-2022-168.md) | Heap overflow in `QuantizeAndDequantizeV2` | <= 2.11.0 | Reported via OSS VRP |
| [TFSA-2022-167](https://github.com/tensorflow/tensorflow/blob/master/tensorflow/security/advisory/tfsa-2022-167.md) | OOB write in grappler | <= 2.11.0 | (discovered internall
python的TensorFlow机器学习工具库源代码 （2000个子文件） 
c_test.c 17KB filterbank_util.c 9KB filterbank.c 4KB xnnpack_plugin_c_test_lib.c 4KB pcan_gain_control_util.c 3KB frontend_util.c 3KB log_scale.c 3KB frontend_io.c 3KB frontend.c 3KB filterbank_io.c 3KB window.c 3KB frontend_main.c 2KB window_util.c 2KB runner_main.c 2KB noise_reduction.c 2KB frontend_memmap_main.c 2KB pcan_gain_control.c 2KB noise_reduction_util.c 2KB window_io.c 2KB frontend_memmap_generator.c 2KB log_lut.c 2KB fft_io.c 2KB noise_reduction_io.c 2KB log_scale_util.c 1KB log_scale_io.c 1006B wrappers.go 1.88MB tensor.go 18KB genop.go 17KB genop_test.go 16KB graph.go 14KB session.go 13KB tensor_test.go 11KB session_test.go 10KB example_inception_inference_test.go 9KB graph_test.go 9KB attrs.go 7KB operation.go 6KB operation_test.go 6KB gradients_test.go 6KB scope.go 6KB scope_test.go 5KB tensor_handle.go 5KB signature_test.go 5KB attrs_test.go 4KB op_test.go 4KB api_def_map.go 4KB saved_model.go 3KB signature.go 3KB context.go 3KB tensor_handle_test.go 3KB shape.go 3KB saved_model_test.go 2KB shape_test.go 2KB main.go 2KB status.go 2KB gradients.go 2KB util_test.go 2KB op.go 2KB context_test.go 1KB doc.go 1KB version.go 834B lib.go 779B generate.go 741B android.go 715B lib.go 688B generate.go 683B schema_generated.h 1.04MB depthwiseconv_uint8_3x3_filter.h 572KB depthwiseconv_uint8_transitional.h 372KB optimized_ops.h 359KB configuration_generated.h 286KB configuration_generated.h 281KB legacy_optimized_ops.h 239KB depthwise_conv_hybrid_3x3_filter.h 130KB depthwise_conv_3x3_filter.h 127KB legacy_reference_ops.h 106KB depthwiseconv_uint8.h 92KB nnapi_implementation.h 88KB depthwise_conv.h 84KB model.h 77KB NeuralNetworksShim.h 72KB common.h 70KB resize_bilinear.h 68KB serialization_base_generated.h 68KB NeuralNetworksSupportLibraryImpl.h 67KB subgraph.h 53KB common.h 52KB test_util.h 49KB interpreter.h 44KB depthwiseconv_float.h 44KB reference_ops.h 42KB c_api_opaque.h 41KB opencl_wrapper.h 37KB types.h 36KB cpu_backend_gemm_custom_gemv.h 36KB NeuralNetworksTypes.h 35KB reduce.h 32KB c_api.h 31KB conversion_metadata_generated.h 30KB portable_tensor_utils.h 29KB共 2000 条
- 1
- 2
- 3
- 4
- 5
- 6
- 20
资源评论
