CVE-2021-35958

Published: 2021-06-30T01:15Z

Last Modified: 2024-11-21T06:12Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

TensorFlow through 2.5.0 allows attackers to overwrite arbitrary files via a crafted archive when tf.keras.utils.get_file is used with extract=True. NOTE: the vendor's position is that tf.keras.utils.get_file is not intended for untrusted archives > MITRE Terms of Use apply – see LICENSE‑MITRE.txt