Memcpy parameter overlap in Google Snappy library 1.1.4, as used in Google TensorFlow before 1.7.1, could result in a crash or read from other parts of process memory.
Date: 2019-04
Affected: google/snappy, google/tensorflow
Attack vector: other
Category: vulnerability-disclosure
Severity: High
CVE: CVE-2018-7577
CWE: CWE-20
CVSS: 8.1 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H)

Memcpy parameter overlap in Google Snappy library 1.1.4, as used in Google TensorFlow before 1.7.1, could result in a crash or read from other parts of process memory.


Mitigations:

Architectural layers (MAESTRO):