-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AIMiggo AIRoot Cause AnalysisThe vulnerability stems from the missing validation of 'filter_input_channel' in the convolution kernel's Prepare function. The commit diff explicitly adds a 'TF_LITE_ENSURE(context, filter_input_channel > 0)' check to this function, confirming this was the vulnerable location. The FPE occurs during the groups calculation when filter_input_channel ≤ 0, which is directly addressed by this patch.
PythonPython| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| tensorflow | pip | < 2.11.1 | 2.11.1 |
| tensorflow-cpu | pip | < 2.11.1 | 2.11.1 |
| tensorflow-gpu | pip |
| < 2.11.1 |
| 2.11.1 |
Ongoing coverage of React2Shell