TensorFlow security advisories
433 advisories · none critical or high in 12 months · latest Jul 30, 2024
60 of 433 advisories
| Date | Advisory | Severity | Fixed in |
|---|---|---|---|
| Jul 302024 | TensorFlow has segfault in array_ops.upper_bound CVE-2023-33976High7.5fixed in 2.12.1 | High7.5 | 2.12.1 |
| Mar 272023 | TensorFlow Denial of Service vulnerability CVE-2023-25661Medium6.5fixed in 2.11.1 | Medium6.5 | 2.11.1 |
| Mar 242023 | TensorFlow vulnerable to Out-of-Bounds Read in DynamicStitch CVE-2023-25659High7.5fixed in 2.11.1 | High7.5 | 2.11.1 |
| Mar 242023 | TensorFlow vulnerable to seg fault in `tf.raw_ops.Print` CVE-2023-25660High7.5fixed in 2.11.1 | High7.5 | 2.11.1 |
| Mar 242023 | TensorFlow vulnerable to integer overflow in EditDistance CVE-2023-25662High7.5fixed in 2.11.1 | High7.5 | 2.11.1 |
| Mar 242023 | TensorFlow has Null Pointer Error in TensorArrayConcatV2 CVE-2023-25663High7.5fixed in 2.11.1 | High7.5 | 2.11.1 |
| Mar 242023 | TensorFlow has Heap-buffer-overflow in AvgPoolGrad CVE-2023-25664High7.5fixed in 2.11.1 | High7.5 | 2.11.1 |
| Mar 242023 | TensorFlow has Null Pointer Error in SparseSparseMaximum CVE-2023-25665High7.5fixed in 2.11.1 | High7.5 | 2.11.1 |
| Mar 242023 | TensorFlow has Floating Point Exception in AudioSpectrogram CVE-2023-25666High7.5fixed in 2.11.1 | High7.5 | 2.11.1 |
| Mar 242023 | TensorFlow vulnerable to segfault when opening multiframe gif CVE-2023-25667Medium6.5fixed in 2.11.1 | Medium6.5 | 2.11.1 |
| Mar 242023 | TensorFlow has a heap out-of-buffer read vulnerability in the QuantizeAndDequantize operation CVE-2023-25668Critical9.8fixed in 2.11.1 | Critical9.8 | 2.11.1 |
| Mar 242023 | TensorFlow has Floating Point Exception in AvgPoolGrad with XLA CVE-2023-25669High7.5fixed in 2.11.1 | High7.5 | 2.11.1 |
| Mar 242023 | TensorFlow has Null Pointer Error in QuantizedMatMulWithBiasAndDequantize CVE-2023-25670High7.5fixed in 2.11.1 | High7.5 | 2.11.1 |
| Mar 242023 | TensorFlow has segmentation fault in tfg-translate CVE-2023-25671High7.5fixed in 2.11.1 | High7.5 | 2.11.1 |
| Mar 242023 | TensorFlow has Null Pointer Error in LookupTableImportV2 CVE-2023-25672High7.5fixed in 2.11.1 | High7.5 | 2.11.1 |
| Mar 242023 | TensorFlow has Floating Point Exception in TensorListSplit with XLA CVE-2023-25673High7.5fixed in 2.11.1 | High7.5 | 2.11.1 |
| Mar 242023 | TensorFlow has Null Pointer Error in RandomShuffle with XLA enable CVE-2023-25674High7.5fixed in 2.11.1 | High7.5 | 2.11.1 |
| Mar 242023 | TensorFlow has Segfault in Bincount with XLA CVE-2023-25675High7.5fixed in 2.11.1 | High7.5 | 2.11.1 |
| Mar 242023 | TensorFlow has null dereference on ParallelConcat with XLA CVE-2023-25676High7.5fixed in 2.11.1 | High7.5 | 2.11.1 |
| Mar 242023 | TensorFlow has double free in Fractional(Max/Avg)Pool CVE-2023-25801High8.0fixed in 2.11.1 | High8.0 | 2.11.1 |
| Mar 242023 | TensorFlow has Floating Point Exception in TFLite in conv kernel CVE-2023-27579High7.5fixed in 2.11.1 | High7.5 | 2.11.1 |
| Mar 242023 | TensorFlow vulnerable to Out-of-Bounds Read in GRUBlockCellGrad CVE-2023-25658High7.5fixed in 2.11.1 | High7.5 | 2.11.1 |
| Nov 222022 | Tensorflow vulnerable to Out-of-Bounds Read CVE-2022-41880Medium6.8fixed in 2.8.4, 2.9.3, 2.10.1 | Medium6.8 | 2.8.4, 2.9.3, 2.10.1 |
| Nov 212022 | `CHECK` failure in `SobolSample` via missing validation GHSA-cqvq-fvhr-v6hcLowfixed in 2.8.4, 2.9.3, 2.10.1 | Low | 2.8.4, 2.9.3, 2.10.1 |
| Nov 212022 | `CHECK` fail in `TensorListScatter` and `TensorListScatterV2` in eager mode GHSA-xf83-q765-xm6mLowfixed in 2.8.4, 2.9.3, 2.10.1 | Low | 2.8.4, 2.9.3, 2.10.1 |
| Nov 212022 | Invalid char to bool conversion when printing a tensor CVE-2022-41911Medium4.8fixed in 2.8.4, 2.9.3, 2.10.1 | Medium4.8 | 2.8.4, 2.9.3, 2.10.1 |
| Nov 212022 | Heap overflow in `QuantizeAndDequantizeV2` CVE-2022-41910Medium4.8fixed in 2.8.4, 2.9.3, 2.10.1 | Medium4.8 | 2.8.4, 2.9.3, 2.10.1 |
| Nov 212022 | Segfault in `CompositeTensorVariantToComponents` CVE-2022-41909Medium4.8fixed in 2.8.4, 2.9.3, 2.10.1 | Medium4.8 | 2.8.4, 2.9.3, 2.10.1 |
| Nov 212022 | `CHECK` fail via inputs in `PyFunc` CVE-2022-41908Medium4.8fixed in 2.8.4, 2.9.3, 2.10.1 | Medium4.8 | 2.8.4, 2.9.3, 2.10.1 |
| Nov 212022 | Overflow in `ResizeNearestNeighborGrad` CVE-2022-41907Medium4.8fixed in 2.8.4, 2.9.3, 2.10.1 | Medium4.8 | 2.8.4, 2.9.3, 2.10.1 |
| Nov 212022 | Out of bounds write in grappler in Tensorflow CVE-2022-41902High7.1fixed in 2.8.4, 2.9.3, 2.10.1 | High7.1 | 2.8.4, 2.9.3, 2.10.1 |
| Nov 212022 | `CHECK_EQ` fail via input in `SparseMatrixNNZ` CVE-2022-41901Medium4.8fixed in 2.8.4, 2.9.3, 2.10.1 | Medium4.8 | 2.8.4, 2.9.3, 2.10.1 |
| Nov 212022 | FractionalMaxPool and FractionalAVGPool heap out-of-bounds acess CVE-2022-41900High7.1fixed in 2.8.4, 2.9.3, 2.10.1 | High7.1 | 2.8.4, 2.9.3, 2.10.1 |
| Nov 212022 | `CHECK` fail via inputs in `SdcaOptimizer` CVE-2022-41899Medium4.8fixed in 2.8.4, 2.9.3, 2.10.1 | Medium4.8 | 2.8.4, 2.9.3, 2.10.1 |
| Nov 212022 | `CHECK` fail via inputs in `SparseFillEmptyRowsGrad` CVE-2022-41898Medium4.8fixed in 2.8.4, 2.9.3, 2.10.1 | Medium4.8 | 2.8.4, 2.9.3, 2.10.1 |
| Nov 212022 | `FractionalMaxPoolGrad` Heap out of bounds read CVE-2022-41897Medium4.8fixed in 2.8.4, 2.9.3, 2.10.1 | Medium4.8 | 2.8.4, 2.9.3, 2.10.1 |
| Nov 212022 | `tf.raw_ops.Mfcc` crashes CVE-2022-41896Medium4.8fixed in 2.8.4, 2.9.3, 2.10.1 | Medium4.8 | 2.8.4, 2.9.3, 2.10.1 |
| Nov 212022 | `MirrorPadGrad` heap out of bounds read CVE-2022-41895Medium4.8fixed in 2.8.4, 2.9.3, 2.10.1 | Medium4.8 | 2.8.4, 2.9.3, 2.10.1 |
| Nov 212022 | Buffer overflow in `CONV_3D_TRANSPOSE` on TFLite CVE-2022-41894High7.1fixed in 2.8.4, 2.9.3, 2.10.1 | High7.1 | 2.8.4, 2.9.3, 2.10.1 |
| Nov 212022 | `CHECK_EQ` fail in `tf.raw_ops.TensorListResize` CVE-2022-41893Medium4.8fixed in 2.8.4, 2.9.3, 2.10.1 | Medium4.8 | 2.8.4, 2.9.3, 2.10.1 |
| Nov 212022 | Segfault in `tf.raw_ops.TensorListConcat` CVE-2022-41891Medium4.8fixed in 2.8.4, 2.9.3, 2.10.1 | Medium4.8 | 2.8.4, 2.9.3, 2.10.1 |
| Nov 212022 | `CHECK` fail in `BCast` overflow CVE-2022-41890Medium4.8fixed in 2.8.4, 2.9.3, 2.10.1 | Medium4.8 | 2.8.4, 2.9.3, 2.10.1 |
| Nov 212022 | Segfault via invalid attributes in `pywrap_tfe_src.cc` CVE-2022-41889Medium5.5fixed in 2.8.4, 2.9.3, 2.10.1 | Medium5.5 | 2.8.4, 2.9.3, 2.10.1 |
| Nov 212022 | FPE in `tf.image.generate_bounding_box_proposals` CVE-2022-41888Medium4.8fixed in 2.8.4, 2.9.3, 2.10.1 | Medium4.8 | 2.8.4, 2.9.3, 2.10.1 |
| Nov 212022 | Overflow in `tf.keras.losses.poisson` CVE-2022-41887Medium4.8fixed in 2.9.3, 2.10.1 | Medium4.8 | 2.9.3, 2.10.1 |
| Nov 212022 | Overflow in `ImageProjectiveTransformV2` CVE-2022-41886Medium4.8fixed in 2.8.4, 2.9.3, 2.10.1 | Medium4.8 | 2.8.4, 2.9.3, 2.10.1 |
| Nov 212022 | Overflow in `FusedResizeAndPadConv2D` CVE-2022-41885Medium4.8fixed in 2.7.4, 2.8.1, 2.9.1 | Medium4.8 | 2.7.4, 2.8.1, 2.9.1 |
| Nov 212022 | Seg fault in `ndarray_tensor_bridge` due to zero and large inputs CVE-2022-41884Medium4.8fixed in 2.8.4, 2.9.3, 2.10.1 | Medium4.8 | 2.8.4, 2.9.3, 2.10.1 |
| Nov 212022 | Out of bounds segmentation fault due to unequal op inputs in Tensorflow CVE-2022-41883Medium6.8fixed in 2.10.1 | Medium6.8 | 2.10.1 |
| Oct 72022 | TensorFlow vulnerable to heap out of bounds read in filesystem glob matching CVE-2020-26269High9.1fixed in 2.4.0 | High9.1 | 2.4.0 |
| Sep 162022 | TensorFlow vulnerable to `CHECK` fail in `Save` and `SaveSlices` CVE-2022-35983Medium5.9fixed in 2.7.2, 2.8.1, 2.9.1 | Medium5.9 | 2.7.2, 2.8.1, 2.9.1 |
| Sep 162022 | TensorFlow vulnerable to `CHECK` fail in `ParameterizedTruncatedNormal` CVE-2022-35984Medium5.9fixed in 2.7.2, 2.8.1, 2.9.1 | Medium5.9 | 2.7.2, 2.8.1, 2.9.1 |
| Sep 162022 | TensorFlow vulnerable to `CHECK` fail in `LRNGrad` CVE-2022-35985Medium5.9fixed in 2.7.2, 2.8.1, 2.9.1 | Medium5.9 | 2.7.2, 2.8.1, 2.9.1 |
| Sep 162022 | TensorFlow vulnerable to segfault in `RaggedBincount` CVE-2022-35986Medium5.9fixed in 2.7.2, 2.8.1, 2.9.1 | Medium5.9 | 2.7.2, 2.8.1, 2.9.1 |
| Sep 162022 | TensorFlow vulnerable to `CHECK` fail in `tf.linalg.matrix_rank` CVE-2022-35988Medium5.9fixed in 2.7.2, 2.8.1, 2.9.1 | Medium5.9 | 2.7.2, 2.8.1, 2.9.1 |
| Sep 162022 | TensorFlow vulnerable to `CHECK` fail in `MaxPool` CVE-2022-35989Medium5.9fixed in 2.7.2, 2.8.1, 2.9.1 | Medium5.9 | 2.7.2, 2.8.1, 2.9.1 |
| Sep 162022 | TensorFlow vulnerable to segfault in `SparseBincount` CVE-2022-35982Medium5.9fixed in 2.7.2, 2.8.1, 2.9.1 | Medium5.9 | 2.7.2, 2.8.1, 2.9.1 |
| Sep 162022 | TensorFlow vulnerable to `CHECK` fail in `FractionalMaxPoolGrad` CVE-2022-35981Medium5.9fixed in 2.7.2, 2.8.1, 2.9.1 | Medium5.9 | 2.7.2, 2.8.1, 2.9.1 |
| Sep 162022 | TensorFlow vulnerable to segfault in `QuantizedRelu` and `QuantizedRelu6` CVE-2022-35979Medium5.9fixed in 2.7.2, 2.8.1, 2.9.1 | Medium5.9 | 2.7.2, 2.8.1, 2.9.1 |
| Sep 162022 | TensorFlow vulnerable to segfault in `QuantizeDownAndShrinkRange` CVE-2022-35974Medium5.9fixed in 2.7.2, 2.8.1, 2.9.1 | Medium5.9 | 2.7.2, 2.8.1, 2.9.1 |
About TensorFlow
The end-to-end machine learning platform.
Packages watched: tensorflow (PyPI).
Google elsewhere on fru.dev: Acquisitions · Paydays · Repos · TechConf · Trending