STT-tensorflow/tensorflow/security/README.md
Mihai Maruseac 17eea4753d Add OSSFuzz badge to TensorFlow.
Now that TF <-> OSSFuzz works again, add badge to show that we are fuzzing the code.

PiperOrigin-RevId: 317140301
Change-Id: I401c1ffd3da37f44910fde3ba60fb2b5c925dfcc
2020-06-18 11:14:42 -07:00

2.8 KiB

TensorFlow Security Advisories

Fuzzing Status

We regularly publish security advisories about using TensorFlow.

Note: In conjunction with these security advisories, we strongly encourage TensorFlow users to read and understand TensorFlow's security model as outlined in SECURITY.md.

Advisory Number Type Versions affected Reported by Additional Information
TFSA-2020-001 Segmentation fault when converting a Python string to tf.float16 >= 12.0, <= 2.1 (found internally)
TFSA-2019-002 Heap buffer overflow in UnsortedSegmentSum <= 1.14 (found internally)
TFSA-2019-001 Null Pointer Dereference Error in Decoding GIF Files <= 1.12 Baidu Security Lab
TFSA-2018-006 Crafted Configuration File results in Invalid Memory Access <= 1.7 Blade Team of Tencent
TFSA-2018-005 Old Snappy Library Usage Resulting in Memcpy Parameter Overlap <= 1.7 Blade Team of Tencent
TFSA-2018-004 Checkpoint Meta File Out-of-Bounds Read <= 1.7 Blade Team of Tencent
TFSA-2018-003 TensorFlow Lite TOCO FlatBuffer Parsing Vulnerability <= 1.7 Blade Team of Tencent
TFSA-2018-002 GIF File Parsing Null Pointer Dereference Error <= 1.5 Blade Team of Tencent
TFSA-2018-001 BMP File Parser Out-of-bounds Read <= 1.6 Blade Team of Tencent
- Out Of Bounds Read <= 1.4 Blade Team of Tencent issue report