TE
Product
Tensorflow
431
CVEs
0
On KEV
9.9
Max CVSS
0
New 30D
Severity mix
Critical 18High 233Medium 178Low 2
Watch
Add Tensorflow to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-15196 | 9.9 | Sep 25 | In Tensorflow version 2.3.0, the `SparseCountSparseOutput` and `RaggedCountSparseOutput` implementations don't validate that the `weights` tensor has the same shape as the data Affected: 2.3.0 |
| CVE-2023-25668 | 9.8 | Mar 25 | TensorFlow is an open source platform for machine learning Affected: before 2.12.0 |
| CVE-2023-25664 | 9.8 | Mar 25 | TensorFlow is an open source platform for machine learning Affected: before 2.12.0 |
| CVE-2022-41900 | 9.8 | Nov 18 | TensorFlow is an open source platform for machine learning Affected: before 2.8.4; 2.9.0 before 2.9.3; 2.10.0 |
| CVE-2022-35939 | 9.8 | Sep 16 | TensorFlow is an open source platform for machine learning Affected: 2.7.0 before 2.7.2; 2.8.0 before 2.8.1; 2.9.0 before 2.9.1; 2.10; 2.10; 2.10; +1 more |
| CVE-2022-23587 | 9.8 | Feb 4 | Tensorflow is an Open Source Machine Learning Framework Affected: through 2.5.2; 2.6.0 through 2.6.2; 2.7.0 |
| CVE-2020-15208 | 9.8 | Sep 25 | In tensorflow-lite before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1, when determining the common dimension size of two tensors, TFLite uses a `DCHECK` which is no-op outside… Affected: before 1.15.4; 2.0.0 before 2.0.3; 2.1.0 before 2.1.2; 2.2.0 before 2.2.1; 2.3.0 before 2.3.1 |
| CVE-2020-15205 | 9.8 | Sep 25 | In Tensorflow before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1, the `data_splits` argument of `tf.raw_ops.StringNGrams` lacks validation Affected: before 1.15.4; 2.0.0 before 2.0.3; 2.1.0 before 2.1.2; 2.2.0 before 2.2.1; 2.3.0 before 2.3.1 |
| CVE-2019-16778 | 9.8 | Dec 16 | In TensorFlow before 1.15, a heap buffer overflow in UnsortedSegmentSum can be produced when the Index template argument is int32 Affected: 1.0.0 before 1.15.0 |
| CVE-2018-7575 | 9.8 | Apr 24 | Google TensorFlow 1.7.x and earlier is affected by a Buffer Overflow vulnerability Affected: through 1.7.0 |
| CVE-2022-41910 | 9.1 | Dec 6 | TensorFlow is an open source platform for machine learning Affected: before 2.8.4; 2.9.0 before 2.9.3; 2.10.0 |
| CVE-2022-41902 | 9.1 | Dec 6 | TensorFlow is an open source platform for machine learning Affected: before 2.8.4; 2.9.0 before 2.9.3; 2.10.0 |
| CVE-2022-41880 | 9.1 | Nov 18 | TensorFlow is an open source platform for machine learning Affected: before 2.8.4; 2.9.0 before 2.9.3; 2.10.0 |
| CVE-2022-35938 | 9.1 | Sep 16 | TensorFlow is an open source platform for machine learning Affected: 2.7.0 before 2.7.2; 2.8.0 before 2.8.1; 2.9.0 before 2.9.1; 2.10; 2.10; 2.10; +1 more |
| CVE-2022-35937 | 9.1 | Sep 16 | TensorFlow is an open source platform for machine learning Affected: 2.7.0 before 2.7.2; 2.8.0 before 2.8.1; 2.9.0 before 2.9.1; 2.10; 2.10; 2.10; +1 more |
| CVE-2021-35958 | 9.1 | Jun 30 | TensorFlow through 2.5.0 allows attackers to overwrite arbitrary files via a crafted archive when tf.keras.utils.get_file is used with extract=True Affected: through 2.5.0 |
| CVE-2020-15207 | 9.0 | Sep 25 | In tensorflow-lite before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1, to mimic Python's indexing with negative values, TFLite uses `ResolveAxis` to convert negative values to… Affected: before 1.15.4; 2.0.0 before 2.0.3; 2.1.0 before 2.1.2; 2.2.0 before 2.2.1; 2.3.0 before 2.3.1 |
| CVE-2020-15202 | 9.0 | Sep 25 | In Tensorflow before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1, the `Shard` API in TensorFlow expects the last argument to be a function taking two `int64` (i.e., `long… Affected: before 1.15.4; 2.0.0 before 2.0.3; 2.1.0 before 2.1.2; 2.2.0 before 2.2.1; 2.3.0 before 2.3.1 |
| CVE-2022-23574 | 8.8 | Feb 4 | Tensorflow is an Open Source Machine Learning Framework Affected: through 2.5.2; 2.6.0 through 2.6.2; 2.7.0 |
| CVE-2022-23573 | 8.8 | Feb 4 | Tensorflow is an Open Source Machine Learning Framework Affected: through 2.5.2; 2.6.0 through 2.6.2; 2.7.0 |
| CVE-2022-23566 | 8.8 | Feb 4 | Tensorflow is an Open Source Machine Learning Framework Affected: through 2.5.2; 2.6.0 through 2.6.2; 2.7.0 |
| CVE-2022-23562 | 8.8 | Feb 4 | Tensorflow is an Open Source Machine Learning Framework Affected: through 2.5.2; 2.6.0 through 2.6.2; 2.7.0 |
| CVE-2022-23561 | 8.8 | Feb 4 | Tensorflow is an Open Source Machine Learning Framework Affected: through 2.5.2; 2.6.0 through 2.6.2; 2.7.0 |
| CVE-2022-23560 | 8.8 | Feb 4 | Tensorflow is an Open Source Machine Learning Framework Affected: through 2.5.2; 2.6.0 through 2.6.2; 2.7.0 |
| CVE-2022-23559 | 8.8 | Feb 4 | Tensorflow is an Open Source Machine Learning Framework Affected: through 2.5.2; 2.6.0 through 2.6.2; 2.7.0 |
| CVE-2022-23558 | 8.8 | Feb 4 | Tensorflow is an Open Source Machine Learning Framework Affected: through 2.5.2; 2.6.0 through 2.6.2; 2.7.0 |
| CVE-2022-21740 | 8.8 | Feb 3 | Tensorflow is an Open Source Machine Learning Framework Affected: through 2.5.2; 2.6.0 through 2.6.2; 2.7.0 |
| CVE-2022-21727 | 8.8 | Feb 3 | Tensorflow is an Open Source Machine Learning Framework Affected: through 2.5.2; 2.6.0 through 2.6.2; 2.7.0 |
| CVE-2022-21726 | 8.8 | Feb 3 | Tensorflow is an Open Source Machine Learning Framework Affected: through 2.5.2; 2.6.0 through 2.6.2; 2.7.0 |
| CVE-2021-37678 | 8.8 | Aug 12 | TensorFlow is an end-to-end open source platform for machine learning Affected: 2.3.0 before 2.3.4; 2.4.0 before 2.4.3; 2.5.0; 2.6.0; 2.6.0; 2.6.0 |
| CVE-2020-15195 | 8.8 | Sep 25 | In Tensorflow before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1, the implementation of `SparseFillEmptyRowsGrad` uses a double indexing pattern Affected: before 1.15.4; 2.0.0 before 2.0.3; 2.1.0 before 2.1.2; 2.2.0 before 2.2.1; 2.3.0 before 2.3.1 |
| CVE-2018-8825 | 8.8 | Apr 23 | Google TensorFlow 1.7 and below is affected by: Buffer Overflow Affected: through 1.7.0 |
| CVE-2020-15212 | 8.6 | Sep 25 | In TensorFlow Lite before versions 2.2.1 and 2.3.1, models using segment sum can trigger writes outside of bounds of heap allocated buffers by inserting negative elements in the… Affected: 2.2.0 before 2.2.1; 2.3.0 before 2.3.1 |
| CVE-2022-41894 | 8.1 | Nov 18 | TensorFlow is an open source platform for machine learning Affected: before 2.8.4; 2.9.0 before 2.9.3; 2.10.0 before 2.10.1 |
| CVE-2022-23592 | 8.1 | Feb 4 | Tensorflow is an Open Source Machine Learning Framework Affected: 2.7.0 before 2.8.0 |
| CVE-2022-21730 | 8.1 | Feb 3 | Tensorflow is an Open Source Machine Learning Framework Affected: through 2.5.2; 2.6.0 through 2.6.2; 2.7.0 |
| CVE-2022-21728 | 8.1 | Feb 3 | Tensorflow is an Open Source Machine Learning Framework Affected: through 2.5.2; 2.6.0 through 2.6.2; 2.7.0 |
| CVE-2020-15214 | 8.1 | Sep 25 | In TensorFlow Lite before versions 2.2.1 and 2.3.1, models using segment sum can trigger a write out bounds / segmentation fault if the segment ids are not sorted Affected: 2.2.0 before 2.2.1; 2.3.0 before 2.3.1 |
| CVE-2018-7577 | 8.1 | Apr 24 | Memcpy parameter overlap in Google Snappy library 1.1.4, as used in Google TensorFlow before 1.7.1, could result in a crash or read from other parts of process memory Affected: before 1.7.1 |
| CVE-2018-10055 | 8.1 | Apr 24 | Invalid memory access and/or a heap buffer overflow in the TensorFlow XLA compiler in Google TensorFlow before 1.7.1 could cause a crash or read from other parts of process memory… Affected: before 1.7.1 |
| CVE-2023-25801 | 7.8 | Mar 25 | TensorFlow is an open source machine learning platform Affected: before 2.12.0 |
| CVE-2022-29216 | 7.8 | May 21 | TensorFlow is an open source platform for machine learning Affected: before 2.6.4; 2.7.0 before 2.7.2; 2.7.0; 2.7.0; 2.8.0; 2.8.0; +3 more |
| CVE-2021-41228 | 7.8 | Nov 5 | TensorFlow is an open source platform for machine learning Affected: 2.4.0 before 2.4.4; 2.5.0 before 2.5.2; 2.6.0 before 2.6.1; 2.7.0; 2.7.0 |
| CVE-2021-41225 | 7.8 | Nov 5 | TensorFlow is an open source platform for machine learning Affected: 2.4.0 before 2.4.4; 2.5.0 before 2.5.2; 2.6.0 before 2.6.1; 2.7.0; 2.7.0 |
| CVE-2021-41221 | 7.8 | Nov 5 | TensorFlow is an open source platform for machine learning Affected: 2.4.0 before 2.4.4; 2.5.0 before 2.5.2; 2.6.0 before 2.6.1; 2.7.0; 2.7.0 |
| CVE-2021-41220 | 7.8 | Nov 5 | TensorFlow is an open source platform for machine learning Affected: 2.6.0 before 2.6.1; 2.7.0; 2.7.0 |
| CVE-2021-41216 | 7.8 | Nov 5 | TensorFlow is an open source platform for machine learning Affected: 2.4.0 before 2.4.4; 2.5.0 before 2.5.2; 2.6.0 before 2.6.1; 2.7.0; 2.7.0 |
| CVE-2021-41208 | 7.8 | Nov 5 | TensorFlow is an open source platform for machine learning Affected: 2.4.0 before 2.4.4; 2.5.0 before 2.5.2; 2.6.0 before 2.6.1; 2.7.0; 2.7.0 |
| CVE-2021-41206 | 7.8 | Nov 5 | TensorFlow is an open source platform for machine learning Affected: 2.4.0 before 2.4.4; 2.5.0 before 2.5.2; 2.6.0 before 2.6.1; 2.7.0; 2.7.0 |
| CVE-2021-41219 | 7.8 | Nov 5 | TensorFlow is an open source platform for machine learning Affected: before 2.4.4; 2.5.0 before 2.5.2; 2.6.0 |