Vulnerabilidades de Google Keras (CVE)

Registros CVE publicados para Google Keras, los más recientes primero. Siga el producto para recibir un correo con cada nueva.

4 resultados
7.1Alta
CVE-2026-1669

Arbitrary File Read in Keras via HDF5 External Datasets

Google Keras; Red Hat Red Hat OpenShift AI (RHOAI)

Arbitrary file read in the model loading mechanism (HDF5 integration) in Keras versions 3.0.0 through 3.13.1 on all supported platforms allows a remote attacker to read local files and disclose sensitive information via a crafted .keras model file utilizing H…

7.1Alta
CVE-2026-0897

Denial of Service in Keras via Excessive Memory Allocation in HDF5 Metadata

Google Keras; Red Hat Red Hat OpenShift AI 2.25; Red Hat Red Hat OpenShift AI 3.3; Red Hat Red Hat Trusted Artifact Signer 1.3

Allocation of Resources Without Limits or Throttling in the HDF5 weight loading component in Google Keras 3.0.0 through 3.13.0 on all platforms allows a remote attacker to cause a Denial of Service (DoS) through memory exhaustion and a crash of the Python int…