Skip to main content

Over 150 LLM Providers · Over 5,300 Models The most extensible AI-powered pentesting platform. Open source. Star on GitHub

CWE-617

MITRE ↗

CWE-617

4
CRITICAL
323
HIGH
439
MEDIUM
34
LOW
808 CVEs · Page 11/17
5.9
CVE-2022-35935

TensorFlow is an open source platform for machine learning. The implementation of SobolSampleOp is vulnerable to a denia

5.9
CVE-2022-35941

TensorFlow is an open source platform for machine learning. The `AvgPoolOp` function takes an argument `ksize` that must

5.9
CVE-2022-35952

TensorFlow is an open source platform for machine learning. The `UnbatchGradOp` function takes an argument `id` that is

5.9
CVE-2022-35959

TensorFlow is an open source platform for machine learning. The implementation of `AvgPool3DGradOp` does not fully valid

5.9
CVE-2022-35960

TensorFlow is an open source platform for machine learning. In `core/kernels/list_kernels.cc's TensorListReserve`, `num_

5.9
CVE-2022-35963

TensorFlow is an open source platform for machine learning. The implementation of `FractionalAvgPoolGrad` does not fully

5.9
CVE-2022-35968

TensorFlow is an open source platform for machine learning. The implementation of `AvgPoolGrad` does not fully validate

5.9
CVE-2022-35969

TensorFlow is an open source platform for machine learning. The implementation of `Conv2DBackpropInput` requires `input_

5.9
CVE-2022-35971

TensorFlow is an open source platform for machine learning. If `FakeQuantWithMinMaxVars` is given `min` or `max` tensors

5.9
CVE-2022-35981

TensorFlow is an open source platform for machine learning. `FractionalMaxPoolGrad` validates its inputs with `CHECK` fa

5.9
CVE-2022-35983

TensorFlow is an open source platform for machine learning. If `Save` or `SaveSlices` is run over tensors of an unsuppor

5.9
CVE-2022-35984

TensorFlow is an open source platform for machine learning. `ParameterizedTruncatedNormal` assumes `shape` is of type `i

5.9
CVE-2022-35985

TensorFlow is an open source platform for machine learning. If `LRNGrad` is given an `output_image` input tensor that is

5.9
CVE-2022-35987

TensorFlow is an open source platform for machine learning. `DenseBincount` assumes its input tensor `weights` to either

5.9
CVE-2022-35988

TensorFlow is an open source platform for machine learning. When `tf.linalg.matrix_rank` receives an empty input `a`, th

5.9
CVE-2022-35989

TensorFlow is an open source platform for machine learning. When `MaxPool` receives a window size input array `ksize` wi

5.9
CVE-2022-35990

TensorFlow is an open source platform for machine learning. When `tf.quantization.fake_quant_with_min_max_vars_per_chann

5.9
CVE-2022-36018

TensorFlow is an open source platform for machine learning. If `RaggedTensorToVariant` is given a `rt_nested_splits` lis

5.9
CVE-2022-36019

TensorFlow is an open source platform for machine learning. If `FakeQuantWithMinMaxVarsPerChannel` is given `min` or `ma

5.9
CVE-2022-36026

TensorFlow is an open source platform for machine learning. If `QuantizeAndDequantizeV3` is given a nonscalar `num_bits`

5.9
CVE-2022-35991

TensorFlow is an open source platform for machine learning. When `TensorListScatter` and `TensorListScatterV2` receive a

5.9
CVE-2022-35992

TensorFlow is an open source platform for machine learning. When `TensorListFromTensor` receives an `element_shape` of a

5.9
CVE-2022-35993

TensorFlow is an open source platform for machine learning. When `SetSize` receives an input `set_shape` that is not a 1

5.9
CVE-2022-35994

TensorFlow is an open source platform for machine learning. When `CollectiveGather` receives an scalar input `input`, it

5.9
CVE-2022-35995

TensorFlow is an open source platform for machine learning. When `AudioSummaryV2` receives an input `sample_rate` with m

5.9
CVE-2022-35997

TensorFlow is an open source platform for machine learning. If `tf.sparse.cross` receives an input `separator` that is n

5.9
CVE-2022-35998

TensorFlow is an open source platform for machine learning. If `EmptyTensorList` receives an input `element_shape` with

5.9
CVE-2022-35999

TensorFlow is an open source platform for machine learning. When `Conv2DBackpropInput` receives empty `out_backprop` inp

5.9
CVE-2022-36001

TensorFlow is an open source platform for machine learning. When `DrawBoundingBoxes` receives an input `boxes` that is n

5.9
CVE-2022-36002

TensorFlow is an open source platform for machine learning. When `Unbatch` receives a nonscalar input `id`, it gives a `

5.9
CVE-2022-36003

TensorFlow is an open source platform for machine learning. When `RandomPoissonV2` receives large input shape and rates,

5.9
CVE-2022-36004

TensorFlow is an open source platform for machine learning. When `tf.random.gamma` receives large input shape and rates,

5.9
CVE-2022-36005

TensorFlow is an open source platform for machine learning. When `tf.quantization.fake_quant_with_min_max_vars_gradient`

5.9
CVE-2022-36012

TensorFlow is an open source platform for machine learning. When `mlir::tfg::ConvertGenericFunctionToFunctionDef` is giv

5.9
CVE-2022-36016

TensorFlow is an open source platform for machine learning. When `tensorflow::full_type::SubstituteFromAttrs` receives a

5.7
CVE-2022-31009

wire-ios is an iOS client for the Wire secure messaging application. Invalid accent colors of Wire communication partner

5.5
CVE-2021-46048

A Denial of Service vulnerability exists in Binaryen 104 due to an assertion abort in wasm::WasmBinaryBuilder::readFunct

5.5
CVE-2021-46052

A Denial of Service vulnerability exists in Binaryen 104 due to an assertion abort in wasm::Tuple::validate.

5.5
CVE-2021-46054

A Denial of Service vulnerability exists in Binaryen 104 due to an assertion abort in wasm::WasmBinaryBuilder::visitReth

5.5
CVE-2021-46055

A Denial of Service vulnerability exists in Binaryen 104 due to an assertion abort in wasm::WasmBinaryBuilder::visitReth

5.5
CVE-2021-46336

There is an Assertion 'opts & PARSER_CLASS_LITERAL_CTOR_PRESENT' failed at /parser/js/js-parser-expr.c(parser_parse_clas

5.5
CVE-2021-46337

There is an Assertion 'page_p != NULL' failed at /parser/js/js-parser-mem.c(parser_list_get) in JerryScript 3.0.0.

5.5
CVE-2021-46338

There is an Assertion 'ecma_is_lexical_environment (object_p)' failed at /base/ecma-helpers.c(ecma_get_lex_env_type) in

5.5
CVE-2021-46339

There is an Assertion 'lit_is_valid_cesu8_string (string_p, string_size)' failed at /base/ecma-helpers-string.c(ecma_new

5.5
CVE-2021-46340

There is an Assertion 'context_p->stack_top_uint8 == SCAN_STACK_TRY_STATEMENT || context_p->stack_top_uint8 == SCAN_STAC

5.5
CVE-2021-46342

There is an Assertion 'ecma_is_lexical_environment (obj_p) || !ecma_op_object_is_fast_array (obj_p)' failed at /jerry-co

5.5
CVE-2021-46343

There is an Assertion 'context_p->token.type == LEXER_LITERAL' failed at /jerry-core/parser/js/js-parser-expr.c in Jerry

5.5
CVE-2021-46344

There is an Assertion 'flags & PARSER_PATTERN_HAS_REST_ELEMENT' failed at /jerry-core/parser/js/js-parser-expr.c in Jerr

5.5
CVE-2021-46345

There is an Assertion 'cesu8_cursor_p == cesu8_end_p' failed at /jerry-core/lit/lit-strings.c in JerryScript 3.0.0.

5.5
CVE-2021-46346

There is an Assertion 'local_tza == ecma_date_local_time_zone_adjustment (date_value)' failed at /jerry-core/ecma/builti

Frequently Asked Questions

What is CWE-617?

CWE-617 (CWE-617) is a weakness category in the Common Weakness Enumeration (CWE) system maintained by MITRE. It describes a class of software or hardware vulnerability that can lead to security issues.

How many CVEs are classified as CWE-617?

There are 926 CVE records associated with CWE-617 in our database. Of these, 4 are critical severity, 323 are high severity, and 439 are medium severity.

How can I protect against CWE-617 vulnerabilities?

Protection strategies depend on the specific weakness type. General measures include input validation, secure coding practices, regular security testing, and keeping software up to date. CyberStrike can help by automatically scanning your infrastructure for vulnerabilities related to CWE-617 using AI-powered security agents.

Detect CWE-617 Vulnerabilities

CyberStrike's AI agents automatically detect cwe-617 vulnerabilities across your infrastructure.

Get Started