漏洞公告

Null pointer dereference in `UncompressElement`

Segfault and heap buffer overflow in `{Experimental,}DatasetToTFRecord`

Heap buffer overflow in `FractionalAvgPoolGrad`

Use after free in boosted trees creation

Division by 0 in `ResourceGather`

Heap OOB and CHECK fail in `ResourceGather`

Heap OOB in `ResourceScatterUpdate`

Reference binding to nullptr in `RaggedTensorToSparse`

Reference binding to nullptr in `MatrixDiagV*` ops

Reference binding to nullptr in `MatrixSetDiagV*` ops

Reference binding to nullptr and heap OOB in binary cwise ops

Division by 0 in inplace operations

Crash caused by integer conversion to unsigned

Reference binding to nullptr in boosted trees

Incomplete validation in `QuantizeV2`

Heap OOB in boosted trees

Incomplete validation in MKL requantization

Reference binding to nullptr in `RaggedTensorToVariant`

Reference binding to nullptr in unicode encoding

FPE in `tf.raw_ops.UnravelIndex`

Crash in NMS ops caused by integer conversion to unsigned

Heap OOB in `UpperBound` and `LowerBound`

Reference binding to nullptr in map operations