tensorflow has 419 CVEs on record between 2019 and 2024. The median CVSS is 5.5 (medium), with 6 rated critical. None have a confirmed exploitation report.
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 5.5
- Publish → KEV
- —
- Last 90 days
- 0 prev 0
Products
- tensorflow 419
Worst active — by depth score
CVE-2021-37678Critical· 9.3Arbitrary code execution due to YAML deserialization63CVE-2022-21728High· 8.1Out of bounds read in Tensorflow57CVE-2021-41208Critical· 9.3Incomplete validation in boosted trees code51CVE-2020-26269Critical· 9.1TensorFlow vulnerable to heap out of bounds read in filesystem glob matching50CVE-2020-15206Critical· 9.0Denial of Service in Tensorflow50
tensorflow vulnerabilities
CVEs affecting tensorflow, newest first. Open any entry for full detail, references, and exploit status.
419 CVEsRSS
CVE-2022-41898Medium· 4.8`CHECK` fail via inputs in `SparseFillEmptyRowsGrad`
`CHECK` fail via inputs in `SparseFillEmptyRowsGrad`
CVE-2022-41894High· 7.1Buffer overflow in `CONV_3D_TRANSPOSE` on TFLite
Buffer overflow in `CONV_3D_TRANSPOSE` on TFLite
CVE-2022-41890Medium· 4.8`CHECK` fail in `BCast` overflow
`CHECK` fail in `BCast` overflow
CVE-2022-41895Medium· 4.8`MirrorPadGrad` heap out of bounds read
`MirrorPadGrad` heap out of bounds read
CVE-2022-41901Medium· 4.8`CHECK_EQ` fail via input in `SparseMatrixNNZ`
`CHECK_EQ` fail via input in `SparseMatrixNNZ`
CVE-2022-41910Medium· 4.8Heap overflow in `QuantizeAndDequantizeV2`
Heap overflow in `QuantizeAndDequantizeV2`
CVE-2022-41897Medium· 4.8`FractionalMaxPoolGrad` Heap out of bounds read
`FractionalMaxPoolGrad` Heap out of bounds read
CVE-2022-41902High· 7.1Out of bounds write in grappler in Tensorflow
Out of bounds write in grappler in Tensorflow
CVE-2022-41887Medium· 4.8Overflow in `tf.keras.losses.poisson`
Overflow in `tf.keras.losses.poisson`
CVE-2022-41885Medium· 4.8Overflow in `FusedResizeAndPadConv2D`
Overflow in `FusedResizeAndPadConv2D`
CVE-2022-41888Medium· 4.8FPE in `tf.image.generate_bounding_box_proposals`
FPE in `tf.image.generate_bounding_box_proposals`
CVE-2022-41893Medium· 4.8`CHECK_EQ` fail in `tf.raw_ops.TensorListResize`
`CHECK_EQ` fail in `tf.raw_ops.TensorListResize`
CVE-2022-41891Medium· 4.8Segfault in `tf.raw_ops.TensorListConcat`
Segfault in `tf.raw_ops.TensorListConcat`
CVE-2022-41886Medium· 4.8Overflow in `ImageProjectiveTransformV2`
Overflow in `ImageProjectiveTransformV2`
CVE-2022-41907Medium· 4.8Overflow in `ResizeNearestNeighborGrad`
Overflow in `ResizeNearestNeighborGrad`
CVE-2022-41899Medium· 4.8`CHECK` fail via inputs in `SdcaOptimizer`
`CHECK` fail via inputs in `SdcaOptimizer`
CVE-2020-26269Critical· 9.1TensorFlow vulnerable to heap out of bounds read in filesystem glob matching
TensorFlow vulnerable to heap out of bounds read in filesystem glob matching
CVE-2022-35940Medium· 5.9TensorFlow vulnerable to Int overflow in `RaggedRangeOp`
TensorFlow vulnerable to Int overflow in `RaggedRangeOp`
CVE-2022-35959Medium· 5.9TensorFlow vulnerable to `CHECK` failures in `AvgPool3DGrad`
TensorFlow vulnerable to `CHECK` failures in `AvgPool3DGrad`
CVE-2022-35986Medium· 5.9TensorFlow vulnerable to segfault in `RaggedBincount`
TensorFlow vulnerable to segfault in `RaggedBincount`
CVE-2022-36017Medium· 5.9TensorFlow vulnerable to segfault in `Requantize`
TensorFlow vulnerable to segfault in `Requantize`
CVE-2022-35993Medium· 5.9TensorFlow vulnerable to `CHECK` fail in `SetSize`
TensorFlow vulnerable to `CHECK` fail in `SetSize`
CVE-2022-35987Medium· 5.9TensorFlow vulnerable to `CHECK` fail in `DenseBincount`
TensorFlow vulnerable to `CHECK` fail in `DenseBincount`
CVE-2022-35981Medium· 5.9TensorFlow vulnerable to `CHECK` fail in `FractionalMaxPoolGrad`
TensorFlow vulnerable to `CHECK` fail in `FractionalMaxPoolGrad`
CVE-2022-35991Medium· 5.9TensorFlow vulnerable to `CHECK` fail in `TensorListScatter` and `TensorListScatterV2`
TensorFlow vulnerable to `CHECK` fail in `TensorListScatter` and `TensorListScatterV2`
CVE-2022-35974Medium· 5.9TensorFlow vulnerable to segfault in `QuantizeDownAndShrinkRange`
TensorFlow vulnerable to segfault in `QuantizeDownAndShrinkRange`
CVE-2022-35979Medium· 5.9TensorFlow vulnerable to segfault in `QuantizedRelu` and `QuantizedRelu6`
TensorFlow vulnerable to segfault in `QuantizedRelu` and `QuantizedRelu6`
CVE-2022-35967Medium· 5.9TensorFlow vulnerable to segfault in `QuantizedAdd`
TensorFlow vulnerable to segfault in `QuantizedAdd`
CVE-2022-35960Medium· 5.9TensorFlow vulnerable to `CHECK` failure in `TensorListReserve` via missing validation
TensorFlow vulnerable to `CHECK` failure in `TensorListReserve` via missing validation
CVE-2022-36015LowTensorFlow vulnerable to integer overflow in math ops
TensorFlow vulnerable to integer overflow in math ops