tensorflow has 419 CVEs on record between 2019 and 2024. The median CVSS is 5.5 (medium), with 6 rated critical. None have a confirmed exploitation report.
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 5.5
- Publish → KEV
- —
- Last 90 days
- 0 prev 0
Products
- tensorflow 419
Worst active — by depth score
CVE-2021-37678Critical· 9.3Arbitrary code execution due to YAML deserialization63CVE-2022-21728High· 8.1Out of bounds read in Tensorflow57CVE-2021-41208Critical· 9.3Incomplete validation in boosted trees code51CVE-2020-26269Critical· 9.1TensorFlow vulnerable to heap out of bounds read in filesystem glob matching50CVE-2020-15206Critical· 9.0Denial of Service in Tensorflow50
tensorflow vulnerabilities
CVEs affecting tensorflow, newest first. Open any entry for full detail, references, and exploit status.
419 CVEsRSS
CVE-2022-29212Medium· 5.5Core dump when loading TFLite models with quantization in TensorFlow
Core dump when loading TFLite models with quantization in TensorFlow
CVE-2022-29216High· 7.8Code injection in `saved_model_cli` in TensorFlow
Code injection in `saved_model_cli` in TensorFlow
CVE-2022-29207Medium· 5.5Undefined behavior when users supply invalid resource handles
Undefined behavior when users supply invalid resource handles
CVE-2022-29196Medium· 5.5Missing validation causes denial of service via `Conv3DBackpropFilterV2`
Missing validation causes denial of service via `Conv3DBackpropFilterV2`
CVE-2022-29213Medium· 5.5Incomplete validation in signal ops leads to crashes in TensorFlow
Incomplete validation in signal ops leads to crashes in TensorFlow
CVE-2022-29205Medium· 5.5Segfault due to missing support for quantized types
Segfault due to missing support for quantized types
CVE-2022-29200Medium· 5.5Missing validation causes denial of service via `LSTMBlockCell`
Missing validation causes denial of service via `LSTMBlockCell`
CVE-2022-29208High· 7.1Segfault and OOB write due to incomplete validation in `EditDistance` in TensorFlow
Segfault and OOB write due to incomplete validation in `EditDistance` in TensorFlow
CVE-2022-29193Medium· 5.5Missing validation causes `TensorSummaryV2` to crash
Missing validation causes `TensorSummaryV2` to crash
CVE-2021-29607Medium· 5.3Incomplete validation in `SparseSparseMinimum`
Incomplete validation in `SparseSparseMinimum`
CVE-2022-23576Medium· 6.5Integer overflow in Tensorflow
Integer overflow in Tensorflow
CVE-2022-21725Medium· 6.5Division by zero in Tensorflow
Division by zero in Tensorflow
CVE-2022-21731Medium· 6.5Type confusion leading to segfault in Tensorflow
Type confusion leading to segfault in Tensorflow
CVE-2022-23583Medium· 6.5`CHECK`-failures in binary ops in Tensorflow
`CHECK`-failures in binary ops in Tensorflow
CVE-2022-21734Medium· 6.5`CHECK`-failures in Tensorflow
`CHECK`-failures in Tensorflow
CVE-2022-23575Medium· 6.5Integer overflow in Tensorflow
Integer overflow in Tensorflow
CVE-2022-21732Medium· 4.3Memory exhaustion in Tensorflow
Memory exhaustion in Tensorflow
CVE-2022-21733Medium· 4.3Memory exhaustion in Tensorflow
Memory exhaustion in Tensorflow
CVE-2022-23578Medium· 4.3Memory leak in Tensorflow
Memory leak in Tensorflow
CVE-2022-23577Medium· 6.5Null-dereference in Tensorflow
Null-dereference in Tensorflow
CVE-2022-21735Medium· 6.5Division by zero in Tensorflow
Division by zero in Tensorflow
CVE-2022-23579Medium· 6.5`CHECK`-failures during Grappler's `SafeToRemoveIdentity` in Tensorflow
`CHECK`-failures during Grappler's `SafeToRemoveIdentity` in Tensorflow
CVE-2022-23582Medium· 6.5`CHECK`-failures in `TensorByteSize` in Tensorflow
`CHECK`-failures in `TensorByteSize` in Tensorflow
CVE-2022-21729Medium· 6.5Overflow and uncaught divide by zero in Tensorflow
Overflow and uncaught divide by zero in Tensorflow
CVE-2022-21738Medium· 6.5Integer overflow leading to crash in Tensorflow
Integer overflow leading to crash in Tensorflow
CVE-2022-23563High· 7.1Insecure temporary file in Tensorflow
Insecure temporary file in Tensorflow
CVE-2022-23592High· 8.1Out of bounds read in Tensorflow
Out of bounds read in Tensorflow
CVE-2022-21730High· 8.1Out of bounds read in Tensorflow
Out of bounds read in Tensorflow
CVE-2022-23572Medium· 6.5Crash when type cannot be specialized in Tensorflow
Crash when type cannot be specialized in Tensorflow
CVE-2022-23567Medium· 6.5Integer overflows in Tensorflow
Integer overflows in Tensorflow