tensorflow has 419 CVEs on record between 2019 and 2024. The median CVSS is 5.5 (medium), with 6 rated critical. None have a confirmed exploitation report.
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 5.5
- Publish → KEV
- —
- Last 90 days
- 0 prev 0
Products
- tensorflow 419
Worst active — by depth score
CVE-2021-37678Critical· 9.3Arbitrary code execution due to YAML deserialization63CVE-2022-21728High· 8.1Out of bounds read in Tensorflow57CVE-2021-41208Critical· 9.3Incomplete validation in boosted trees code51CVE-2020-26269Critical· 9.1TensorFlow vulnerable to heap out of bounds read in filesystem glob matching50CVE-2020-15206Critical· 9.0Denial of Service in Tensorflow50
tensorflow vulnerabilities
CVEs affecting tensorflow, newest first. Open any entry for full detail, references, and exploit status.
419 CVEsRSS
CVE-2023-33976High· 7.5TensorFlow has segfault in array_ops.upper_bound
TensorFlow has segfault in array_ops.upper_bound
CVE-2023-25661Medium· 6.5TensorFlow Denial of Service vulnerability
TensorFlow Denial of Service vulnerability
CVE-2023-25669High· 7.5TensorFlow has Floating Point Exception in AvgPoolGrad with XLA
TensorFlow has Floating Point Exception in AvgPoolGrad with XLA
CVE-2023-25660High· 7.5TensorFlow vulnerable to seg fault in `tf.raw_ops.Print`
TensorFlow vulnerable to seg fault in `tf.raw_ops.Print`
CVE-2023-25671High· 7.5TensorFlow has segmentation fault in tfg-translate
TensorFlow has segmentation fault in tfg-translate
CVE-2023-25674High· 7.5TensorFlow has Null Pointer Error in RandomShuffle with XLA enable
TensorFlow has Null Pointer Error in RandomShuffle with XLA enable
CVE-2023-25667Medium· 6.5TensorFlow vulnerable to segfault when opening multiframe gif
TensorFlow vulnerable to segfault when opening multiframe gif
CVE-2023-25666High· 7.5TensorFlow has Floating Point Exception in AudioSpectrogram
TensorFlow has Floating Point Exception in AudioSpectrogram
CVE-2023-25801High· 8.0TensorFlow has double free in Fractional(Max/Avg)Pool
TensorFlow has double free in Fractional(Max/Avg)Pool
CVE-2023-25672High· 7.5TensorFlow has Null Pointer Error in LookupTableImportV2
TensorFlow has Null Pointer Error in LookupTableImportV2
CVE-2023-25659High· 7.5TensorFlow vulnerable to Out-of-Bounds Read in DynamicStitch
TensorFlow vulnerable to Out-of-Bounds Read in DynamicStitch
CVE-2023-25675High· 7.5TensorFlow has Segfault in Bincount with XLA
TensorFlow has Segfault in Bincount with XLA
CVE-2023-25662High· 7.5TensorFlow vulnerable to integer overflow in EditDistance
TensorFlow vulnerable to integer overflow in EditDistance
CVE-2023-25676High· 7.5TensorFlow has null dereference on ParallelConcat with XLA
TensorFlow has null dereference on ParallelConcat with XLA
CVE-2023-25664High· 7.5TensorFlow has Heap-buffer-overflow in AvgPoolGrad
TensorFlow has Heap-buffer-overflow in AvgPoolGrad
CVE-2023-25658High· 7.5TensorFlow vulnerable to Out-of-Bounds Read in GRUBlockCellGrad
TensorFlow vulnerable to Out-of-Bounds Read in GRUBlockCellGrad
CVE-2023-25663High· 7.5TensorFlow has Null Pointer Error in TensorArrayConcatV2
TensorFlow has Null Pointer Error in TensorArrayConcatV2
CVE-2023-25673High· 7.5TensorFlow has Floating Point Exception in TensorListSplit with XLA
TensorFlow has Floating Point Exception in TensorListSplit with XLA
CVE-2023-27579High· 7.5TensorFlow has Floating Point Exception in TFLite in conv kernel
TensorFlow has Floating Point Exception in TFLite in conv kernel
CVE-2023-25665High· 7.5TensorFlow has Null Pointer Error in SparseSparseMaximum
TensorFlow has Null Pointer Error in SparseSparseMaximum
CVE-2023-25670High· 7.5TensorFlow has Null Pointer Error in QuantizedMatMulWithBiasAndDequantize
TensorFlow has Null Pointer Error in QuantizedMatMulWithBiasAndDequantize
CVE-2022-41880Medium· 6.8Tensorflow vulnerable to Out-of-Bounds Read
Tensorflow vulnerable to Out-of-Bounds Read
CVE-2022-41889Medium· 5.5Segfault via invalid attributes in `pywrap_tfe_src.cc`
Segfault via invalid attributes in `pywrap_tfe_src.cc`
CVE-2022-41900High· 7.1FractionalMaxPool and FractionalAVGPool heap out-of-bounds acess
FractionalMaxPool and FractionalAVGPool heap out-of-bounds acess
CVE-2022-41883Medium· 6.8Out of bounds segmentation fault due to unequal op inputs in Tensorflow
Out of bounds segmentation fault due to unequal op inputs in Tensorflow
CVE-2022-41896Medium· 4.8`tf.raw_ops.Mfcc` crashes
`tf.raw_ops.Mfcc` crashes
CVE-2022-41909Medium· 4.8Segfault in `CompositeTensorVariantToComponents`
Segfault in `CompositeTensorVariantToComponents`
CVE-2022-41911Medium· 4.8Invalid char to bool conversion when printing a tensor
Invalid char to bool conversion when printing a tensor
CVE-2022-41908Medium· 4.8`CHECK` fail via inputs in `PyFunc`
`CHECK` fail via inputs in `PyFunc`
CVE-2022-41884Medium· 4.8Seg fault in `ndarray_tensor_bridge` due to zero and large inputs
Seg fault in `ndarray_tensor_bridge` due to zero and large inputs