tensorflow has 419 CVEs on record between 2019 and 2024. The median CVSS is 5.5 (medium), with 6 rated critical. None have a confirmed exploitation report.
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 5.5
- Publish → KEV
- —
- Last 90 days
- 0 prev 0
Products
- tensorflow 419
Worst active — by depth score
CVE-2021-37678Critical· 9.3Arbitrary code execution due to YAML deserialization63CVE-2022-21728High· 8.1Out of bounds read in Tensorflow57CVE-2021-41208Critical· 9.3Incomplete validation in boosted trees code51CVE-2020-26269Critical· 9.1TensorFlow vulnerable to heap out of bounds read in filesystem glob matching50CVE-2020-15206Critical· 9.0Denial of Service in Tensorflow50
tensorflow vulnerabilities
CVEs affecting tensorflow, newest first. Open any entry for full detail, references, and exploit status.
419 CVEsRSS
CVE-2021-29553Low· 2.5Heap OOB in `QuantizeAndDequantizeV3`
Heap OOB in `QuantizeAndDequantizeV3`
CVE-2021-29606High· 7.1Heap OOB read in TFLite
Heap OOB read in TFLite
CVE-2021-29561Low· 2.5CHECK-fail in `LoadAndRemapMatrix`
CHECK-fail in `LoadAndRemapMatrix`
CVE-2021-29539Low· 2.5Segfault in tf.raw_ops.ImmutableConst
Segfault in tf.raw_ops.ImmutableConst
CVE-2021-29556Low· 2.5Division by 0 in `Reverse`
Division by 0 in `Reverse`
CVE-2021-29543Low· 2.5CHECK-fail in `CTCGreedyDecoder`
CHECK-fail in `CTCGreedyDecoder`
CVE-2021-29550Low· 2.5Division by 0 in `FractionalAvgPool`
Division by 0 in `FractionalAvgPool`
CVE-2021-29591High· 7.3Stack overflow due to looping TFLite subgraph
Stack overflow due to looping TFLite subgraph
CVE-2021-29603Low· 2.5Heap OOB write in TFLite
Heap OOB write in TFLite
CVE-2021-29609Medium· 5.3Incomplete validation in `SparseAdd`
Incomplete validation in `SparseAdd`
CVE-2021-29593Low· 2.5Division by zero in TFLite's implementation of `BatchToSpaceNd`
Division by zero in TFLite's implementation of `BatchToSpaceNd`
CVE-2021-29522Low· 2.5Division by 0 in `Conv3DBackprop*`
Division by 0 in `Conv3DBackprop*`
CVE-2021-29582Low· 2.5Heap OOB read in `tf.raw_ops.Dequantize`
Heap OOB read in `tf.raw_ops.Dequantize`
CVE-2021-29583Low· 2.5Heap buffer overflow and undefined behavior in `FusedBatchNorm`
Heap buffer overflow and undefined behavior in `FusedBatchNorm`
CVE-2021-29573Low· 2.5Division by 0 in `MaxPoolGradWithArgmax`
Division by 0 in `MaxPoolGradWithArgmax`
CVE-2021-29611Low· 3.6Incomplete validation in `SparseReshape`
Incomplete validation in `SparseReshape`
CVE-2021-29601Medium· 6.3Integer overflow in TFLite concatentation
Integer overflow in TFLite concatentation
CVE-2021-29599Low· 2.5Division by zero in TFLite's implementation of Split
Division by zero in TFLite's implementation of Split
CVE-2021-29604Low· 2.5Division by zero in TFLite's implementation of hashtable lookup
Division by zero in TFLite's implementation of hashtable lookup
CVE-2021-29514Low· 2.5Heap out of bounds write in `RaggedBinCount`
Heap out of bounds write in `RaggedBinCount`
CVE-2021-29560Low· 2.5Heap buffer overflow in `RaggedTensorToTensor`
Heap buffer overflow in `RaggedTensorToTensor`
CVE-2021-29516Low· 2.5Null pointer dereference via invalid Ragged Tensors
Null pointer dereference via invalid Ragged Tensors
CVE-2021-29574Low· 2.5Undefined behavior in `MaxPool3DGradGrad`
Undefined behavior in `MaxPool3DGradGrad`
CVE-2021-29576Low· 2.5Heap buffer overflow in `MaxPool3DGradGrad`
Heap buffer overflow in `MaxPool3DGradGrad`
CVE-2021-29579Low· 2.5Heap buffer overflow in `MaxPoolGrad`
Heap buffer overflow in `MaxPoolGrad`
CVE-2021-29517Low· 2.5Division by zero in `Conv3D`
Division by zero in `Conv3D`
CVE-2021-29519Low· 2.5CHECK-fail in SparseCross due to type confusion
CHECK-fail in SparseCross due to type confusion
CVE-2021-29564Low· 2.5Null pointer dereference in `EditDistance`
Null pointer dereference in `EditDistance`
CVE-2021-29575Low· 2.5Overflow/denial of service in `tf.raw_ops.ReverseSequence`
Overflow/denial of service in `tf.raw_ops.ReverseSequence`
CVE-2021-29534Low· 2.5CHECK-fail in SparseConcat
CHECK-fail in SparseConcat