Google TensorFlow code issue vulnerability (CNVD-2022-09856)

Google TensorFlow is an end-to-end open source platform for machine learning from Google, Inc. A code issue vulnerability exists in Google TensorFlow, which stems from the fact that when a tensor is recovered via the raw API, TensorFlow could be tricked into referencing a null pointer if a tensor name is not provided. An attacker could exploit the vulnerability by providing some tensor names to read memory outside the boundaries of the heap allocation data.