Google TensorFlow buffer overflow vulnerability (CNVD-2021-64536)

Google TensorFlow is an end-to-end open source platform for machine learning from Google, Inc. A buffer overflow vulnerability exists in Google TensorFlow, which stems from the fact that in affected versions, an attacker could exploit the vulnerability by sending an invalid argument to tf.raw_ops. resourcespatterupdate with an invalid argument, triggering an out-of-bounds data read from a heap allocation.