-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AIMiggo AIRoot Cause AnalysisThe vulnerability stems from TensorListSplitOp implementation in tensor_list_ops.cc where: 1) The commit diff shows added validation for positive lengths 2) The CWE-697 (Incorrect Comparison) matches missing validation 3) The reproduction code uses lengths=[0] 4) The error message 'All lengths must be positive' in tests corresponds to the added check. The function is clearly identified as the XLA kernel implementation handling the vulnerable operation.
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| tensorflow | pip | < 2.11.1 | 2.11.1 |
| tensorflow-cpu | pip | < 2.11.1 | 2.11.1 |
| tensorflow-gpu | pip | < 2.11.1 | 2.11.1 |
PythonPython