漏洞公告

Integer overflow in TFLite memory allocation

Division by zero in TFLite's implementation of hashtable lookup

Heap OOB write in TFLite

Division by zero in TFLite's implementation of `DepthwiseConv`

Integer overflow in TFLite concatentation

Division by zero in TFLite's implementation of `OneHot`

Division by zero in TFLite's implementation of Split

Division by zero in TFLite's implementation of `SVDF`

Division by zero in TFLite's implementation of `SpaceToBatchNd`

Division by zero in TFLite's implementation of `EmbeddingLookup`

Division by zero in TFLite's implementation of `DepthToSpace`

Division by zero in TFLite's convolution code

Division by zero in TFLite's implementation of `BatchToSpaceNd`

Null pointer dereference in TFLite's `Reshape` operator

Stack overflow due to looping TFLite subgraph

Heap OOB read in TFLite's implementation of `Minimum` or `Maximum`

Division by zero in TFLite's implementation of `GatherNd`

Division by zero in TFLite's implementation of `TransposeConv`

Division by zero in TFLite's implementation of `SpaceToDepth`

Division by zero in optimized pooling implementations in TFLite

Division by zero in padding computation in TFLite

CHECK-fail due to integer overflow

Heap buffer overflow and undefined behavior in `FusedBatchNorm`