tensorflow has 419 CVEs on record between 2019 and 2024. The median CVSS is 5.5 (medium), with 6 rated critical. None have a confirmed exploitation report.
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 5.5
- Publish → KEV
- —
- Last 90 days
- 0 prev 0
Products
- tensorflow 419
Worst active — by depth score
CVE-2021-37678Critical· 9.3Arbitrary code execution due to YAML deserialization63CVE-2022-21728High· 8.1Out of bounds read in Tensorflow57CVE-2021-41208Critical· 9.3Incomplete validation in boosted trees code51CVE-2020-26269Critical· 9.1TensorFlow vulnerable to heap out of bounds read in filesystem glob matching50CVE-2020-15206Critical· 9.0Denial of Service in Tensorflow50
tensorflow vulnerabilities
CVEs affecting tensorflow, newest first. Open any entry for full detail, references, and exploit status.
419 CVEsRSS
CVE-2021-29567Low· 2.5Lack of validation in `SparseDenseCwiseMul`
Lack of validation in `SparseDenseCwiseMul`
CVE-2021-29571Medium· 4.5Memory corruption in `DrawBoundingBoxesV2`
Memory corruption in `DrawBoundingBoxesV2`
CVE-2021-29520Low· 2.5Heap buffer overflow in `Conv3DBackprop*`
Heap buffer overflow in `Conv3DBackprop*`
CVE-2021-29551Low· 2.5OOB read in `MatrixTriangularSolve`
OOB read in `MatrixTriangularSolve`
CVE-2021-29581Low· 2.5Segfault in `CTCBeamSearchDecoder`
Segfault in `CTCBeamSearchDecoder`
CVE-2021-29588Low· 2.5Division by zero in TFLite's implementation of `TransposeConv`
Division by zero in TFLite's implementation of `TransposeConv`
CVE-2021-29595Low· 2.5Division by zero in TFLite's implementation of `DepthToSpace`
Division by zero in TFLite's implementation of `DepthToSpace`
CVE-2021-29577Low· 2.5Heap buffer overflow in `AvgPool3DGrad`
Heap buffer overflow in `AvgPool3DGrad`
CVE-2021-29597Low· 2.5Division by zero in TFLite's implementation of `SpaceToBatchNd`
Division by zero in TFLite's implementation of `SpaceToBatchNd`
CVE-2021-29608Medium· 5.3Heap OOB and null pointer dereference in `RaggedTensorToTensor`
Heap OOB and null pointer dereference in `RaggedTensorToTensor`
CVE-2021-29602Low· 2.5Division by zero in TFLite's implementation of `DepthwiseConv`
Division by zero in TFLite's implementation of `DepthwiseConv`
CVE-2021-29565Low· 2.5Null pointer dereference in `SparseFillEmptyRows`
Null pointer dereference in `SparseFillEmptyRows`
CVE-2021-29555Low· 2.5Division by 0 in `FusedBatchNorm`
Division by 0 in `FusedBatchNorm`
CVE-2021-29554Low· 2.5Division by 0 in `DenseCountSparseOutput`
Division by 0 in `DenseCountSparseOutput`
CVE-2021-29566Low· 2.5Heap OOB access in `Dilation2DBackpropInput`
Heap OOB access in `Dilation2DBackpropInput`
CVE-2021-29598Low· 2.5Division by zero in TFLite's implementation of `SVDF`
Division by zero in TFLite's implementation of `SVDF`
CVE-2021-29563Low· 2.5CHECK-fail in `tf.raw_ops.RFFT`
CHECK-fail in `tf.raw_ops.RFFT`
CVE-2021-29548Low· 2.5Division by 0 in `QuantizedBatchNormWithGlobalNormalization`
Division by 0 in `QuantizedBatchNormWithGlobalNormalization`
CVE-2021-29585Low· 2.5Division by zero in padding computation in TFLite
Division by zero in padding computation in TFLite
CVE-2021-29558Low· 2.5Heap buffer overflow in `SparseSplit`
Heap buffer overflow in `SparseSplit`
CVE-2021-29610Low· 3.6Invalid validation in `QuantizeAndDequantizeV2`
Invalid validation in `QuantizeAndDequantizeV2`
CVE-2021-29617Low· 2.5Crash in `tf.strings.substr` due to `CHECK`-fail
Crash in `tf.strings.substr` due to `CHECK`-fail
CVE-2021-29552Low· 2.5CHECK-failure in `UnsortedSegmentJoin`
CHECK-failure in `UnsortedSegmentJoin`
CVE-2021-29529Low· 2.5Heap buffer overflow caused by rounding
Heap buffer overflow caused by rounding
CVE-2021-29600Low· 2.5Division by zero in TFLite's implementation of `OneHot`
Division by zero in TFLite's implementation of `OneHot`
CVE-2021-29538Low· 2.5Division by zero in `Conv2DBackpropFilter`
Division by zero in `Conv2DBackpropFilter`
CVE-2021-29587Low· 2.5Division by zero in TFLite's implementation of `SpaceToDepth`
Division by zero in TFLite's implementation of `SpaceToDepth`
CVE-2021-29532Low· 2.5Heap out of bounds read in `RaggedCross`
Heap out of bounds read in `RaggedCross`
CVE-2021-29545Low· 2.5Heap buffer overflow in `SparseTensorToCSRSparseMatrix`
Heap buffer overflow in `SparseTensorToCSRSparseMatrix`
CVE-2021-29515Low· 2.5Reference binding to null pointer in `MatrixDiag*` ops
Reference binding to null pointer in `MatrixDiag*` ops