tensorflow has 419 CVEs on record between 2019 and 2024. The median CVSS is 5.5 (medium), with 6 rated critical. None have a confirmed exploitation report.
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 5.5
- Publish → KEV
- —
- Last 90 days
- 0 prev 0
Products
- tensorflow 419
Worst active — by depth score
CVE-2021-37678Critical· 9.3Arbitrary code execution due to YAML deserialization63CVE-2022-21728High· 8.1Out of bounds read in Tensorflow57CVE-2021-41208Critical· 9.3Incomplete validation in boosted trees code51CVE-2020-26269Critical· 9.1TensorFlow vulnerable to heap out of bounds read in filesystem glob matching50CVE-2020-15206Critical· 9.0Denial of Service in Tensorflow50
tensorflow vulnerabilities
CVEs affecting tensorflow, newest first. Open any entry for full detail, references, and exploit status.
419 CVEsRSS
CVE-2022-23562High· 7.6Integer overflow in Tensorflow
Integer overflow in Tensorflow
CVE-2022-23569Medium· 6.5`CHECK`-fails when building invalid tensor shapes in Tensorflow
`CHECK`-fails when building invalid tensor shapes in Tensorflow
CVE-2022-23573High· 7.6Uninitialized variable access in Tensorflow
Uninitialized variable access in Tensorflow
CVE-2022-23590Medium· 5.9Crash due to erroneous `StatusOr` in TensorFlow
Crash due to erroneous `StatusOr` in TensorFlow
CVE-2022-21736High· 7.6Undefined behavior in `SparseTensorSliceDataset`
Undefined behavior in `SparseTensorSliceDataset`
CVE-2022-23571Medium· 6.5Reachable Assertion in Tensorflow
Reachable Assertion in Tensorflow
CVE-2022-23593Medium· 5.9Segfault in `simplifyBroadcast` in Tensorflow
Segfault in `simplifyBroadcast` in Tensorflow
CVE-2022-23557Medium· 6.5Division by zero in TFLite
Division by zero in TFLite
CVE-2022-23588Medium· 6.5`CHECK`-fails due to attempting to build a reference tensor
`CHECK`-fails due to attempting to build a reference tensor
CVE-2022-23585Medium· 4.3Memory leak in decoding PNG images
Memory leak in decoding PNG images
CVE-2022-23595Medium· 5.3Null pointer dereference in TensorFlow
Null pointer dereference in TensorFlow
CVE-2022-21737Medium· 6.5Assertion failure based denial of service in Tensorflow
Assertion failure based denial of service in Tensorflow
CVE-2022-21727High· 7.6Integer overflow in Tensorflow
Integer overflow in Tensorflow
CVE-2022-23589Medium· 6.5Null pointer dereference in Grappler's `IsConstant`
Null pointer dereference in Grappler's `IsConstant`
CVE-2022-23570Medium· 6.5Null-dereference in Tensorflow
Null-dereference in Tensorflow
CVE-2022-23558High· 7.6Integer overflow in TFLite array creation
Integer overflow in TFLite array creation
CVE-2022-23561High· 8.8Out of bounds write in TFLite
Out of bounds write in TFLite
CVE-2022-23559High· 8.8Integer overflow in TFLite
Integer overflow in TFLite
CVE-2022-23564Medium· 6.5Reachable Assertion in Tensorflow
Reachable Assertion in Tensorflow
CVE-2022-23587High· 8.8Integer overflow in TensorFlow
Integer overflow in TensorFlow
CVE-2022-23574High· 8.8Out of bounds read and write in Tensorflow
Out of bounds read and write in Tensorflow
CVE-2022-21728High· 8.1PoCOut of bounds read in Tensorflow
Out of bounds read in Tensorflow
CVE-2022-23568Medium· 6.5Integer overflows in Tensorflow
Integer overflows in Tensorflow
CVE-2022-23566High· 8.8Out of bounds write in Tensorflow
Out of bounds write in Tensorflow
CVE-2022-23565Medium· 6.5`CHECK`-failures in Tensorflow
`CHECK`-failures in Tensorflow
CVE-2022-23560High· 8.8Read and Write outside of bounds in TensorFlow
Read and Write outside of bounds in TensorFlow
CVE-2022-21740High· 7.6Heap overflow in Tensorflow
Heap overflow in Tensorflow
CVE-2022-23586Medium· 6.5Multiple `CHECK`-fails in `function.cc` in TensowFlow
Multiple `CHECK`-fails in `function.cc` in TensowFlow
CVE-2022-21741Medium· 6.5Division by zero in TFLite
Division by zero in TFLite
CVE-2022-21739Medium· 6.5Null pointer dereference in TensorFlow
Null pointer dereference in TensorFlow