Google TensorFlow 1.7.x and earlier is affected by a Buffer Overflow vulnerability.
Date: 2019-04
Affected: google/tensorflow
Attack vector: other
Category: vulnerability-disclosure
Severity: Critical
CVE: CVE-2018-7575
CWE: CWE-190
CVSS: 9.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)

Google TensorFlow 1.7.x and earlier is affected by a Buffer Overflow vulnerability. The type of exploitation is context-dependent.


Mitigations:

Architectural layers (MAESTRO):