Google TensorFlow, an end-to-end open source machine learning platform, is vulnerable to an information disclosure vulnerability in Google TensorFlow TFLite. The vulnerability is caused by a heap out-of-bounds read flaw in expand_dims.cc in TFLite, which can be exploited by attackers to obtain sensitive information.