ITADN

[Tensorflow] Fix potential vulnerable cloned function

#1016Pull Requestnpt-1707 创建于 2025-05-08
N
npt-1707commented
Hi again, I identified another potential vulnerability in a clone function ConvBackpropComputeDimensionsV2() in `tensorflow/lite/kernels/quantize_op.cc` sourced from [tensorflow/tensorflow](https://github.com/tensorflow/tensorflow). This issue, originally reported in [CVE-2021-29524](https://nvd.nist.gov/vuln/detail/https://github.com/advisories/CVE-2021-29524), was resolved in the repository via this commit https://github.com/tensorflow/tensorflow/commit/fca9874a9b42a2134f907d2fb46ab774a831404a. This PR applies the corresponding patch to fix the vulnerabilities in this codebase. Additionally, I suggest updating this `tensorflow` component to avoid unexpected vulnerabilities. Please review at your convenience. Thank you!
合并状态:未合并 0 条评论