CVE-2019-16778

Name of the Vulnerable Software and Affected Versions TensorFlow versions prior to 1.15 TensorFlow versions prior to 2.0

Description A heap buffer overflow in UnsortedSegmentSum can occur when the Index template argument is int32, causing data size and num segments fields to be truncated from int64 to int32, potentially resulting in accessing out of bounds heap memory. This issue is unlikely to be exploitable and was detected and fixed internally.

Recommendations For versions prior to 1.15, update to TensorFlow 1.15 or later. For versions prior to 2.0, update to TensorFlow 2.0 or later.