漏洞公告

Heap OOB in boosted trees

Incomplete validation in MKL requantization

Reference binding to nullptr in `RaggedTensorToVariant`

Reference binding to nullptr in unicode encoding

FPE in `tf.raw_ops.UnravelIndex`

Crash in NMS ops caused by integer conversion to unsigned

Heap OOB in `UpperBound` and `LowerBound`

Reference binding to nullptr in map operations

Heap OOB in `SdcaOptimizerV2`

`CHECK`-fail in `MapStage`

Incomplete validation in `MaxPoolGrad`

Division by 0 in most convolution operators

Reference binding to nullptr in shape inference

Missing validation in shape inference for `Dequantize`

Arbitrary code execution due to YAML deserialization

Heap OOB in nested `tf.map_fn` with `RaggedTensor`s

Division by zero in TFLite

NPE in TFLite

Use of unitialized value in TFLite

FPE in TFLite division operations

FPE in TFLite pooling operations

Heap OOB in TFLite

Heap OOB in TFLite's `Gather*` implementations