漏洞公告

Null pointer dereference and heap OOB read in operations restoring tensors

Integer division by 0 in sparse reshaping

Heap OOB in `RaggedGather`

Division by 0 in `ResourceScatterDiv`

Null pointer dereference in `MatrixDiagPartOp`

`std::abort` raised from `TensorListReserve`

Integer overflow due to conversion to unsigned

Bad alloc in `StringNGrams` caused by integer conversion

Null pointer dereference in `SparseTensorSliceDataset`

Incorrect validation of `SaveV2` inputs

Null pointer dereference in `UncompressElement`

Segfault and heap buffer overflow in `{Experimental,}DatasetToTFRecord`

Heap buffer overflow in `FractionalAvgPoolGrad`

Use after free in boosted trees creation

Division by 0 in `ResourceGather`

Heap OOB and CHECK fail in `ResourceGather`

Heap OOB in `ResourceScatterUpdate`

Reference binding to nullptr in `RaggedTensorToSparse`

Reference binding to nullptr in `MatrixDiagV*` ops

Reference binding to nullptr in `MatrixSetDiagV*` ops

Reference binding to nullptr and heap OOB in binary cwise ops

Division by 0 in inplace operations

Crash caused by integer conversion to unsigned