TE
Product
Tensorflow
431
CVEs
0
On KEV
9.9
Max CVSS
0
New 30D
Severity mix
Critical 18High 233Medium 178Low 2
Watch
Add Tensorflow to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-29539 | 5.5 | May 14 | TensorFlow is an end-to-end open source platform for machine learning Affected: before 2.1.4; 2.2.0 before 2.2.3; 2.3.0 before 2.3.3; 2.4.0 before 2.4.2 |
| CVE-2021-29538 | 5.5 | May 14 | TensorFlow is an end-to-end open source platform for machine learning Affected: before 2.1.4; 2.2.0 before 2.2.3; 2.3.0 before 2.3.3; 2.4.0 before 2.4.2 |
| CVE-2021-29534 | 5.5 | May 14 | TensorFlow is an end-to-end open source platform for machine learning Affected: before 2.1.4; 2.2.0 before 2.2.3; 2.3.0 before 2.3.3; 2.4.0 before 2.4.2 |
| CVE-2021-29533 | 5.5 | May 14 | TensorFlow is an end-to-end open source platform for machine learning Affected: before 2.1.4; 2.2.0 before 2.2.3; 2.3.0 before 2.3.3; 2.4.0 before 2.4.2 |
| CVE-2021-29531 | 5.5 | May 14 | TensorFlow is an end-to-end open source platform for machine learning Affected: before 2.1.4; 2.2.0 before 2.2.3; 2.3.0 before 2.3.3; 2.4.0 before 2.4.2 |
| CVE-2021-29528 | 5.5 | May 14 | TensorFlow is an end-to-end open source platform for machine learning Affected: before 2.1.4; 2.2.0 before 2.2.3; 2.3.0 before 2.3.3; 2.4.0 before 2.4.2 |
| CVE-2021-29527 | 5.5 | May 14 | TensorFlow is an end-to-end open source platform for machine learning Affected: before 2.1.4; 2.2.0 before 2.2.3; 2.3.0 before 2.3.3; 2.4.0 before 2.4.2 |
| CVE-2021-29526 | 5.5 | May 14 | TensorFlow is an end-to-end open source platform for machine learning Affected: before 2.1.4; 2.2.0 before 2.2.3; 2.3.0 before 2.3.3; 2.4.0 before 2.4.2 |
| CVE-2021-29524 | 5.5 | May 14 | TensorFlow is an end-to-end open source platform for machine learning Affected: before 2.1.4; 2.2.0 before 2.2.3; 2.3.0 before 2.3.3; 2.4.0 before 2.4.2 |
| CVE-2021-29523 | 5.5 | May 14 | TensorFlow is an end-to-end open source platform for machine learning Affected: before 2.1.4; 2.2.0 before 2.2.3; 2.3.0 before 2.3.3; 2.4.0 before 2.4.2 |
| CVE-2021-29522 | 5.5 | May 14 | TensorFlow is an end-to-end open source platform for machine learning Affected: before 2.1.4; 2.2.0 before 2.2.3; 2.3.0 before 2.3.3; 2.4.0 before 2.4.2 |
| CVE-2021-29521 | 5.5 | May 14 | TensorFlow is an end-to-end open source platform for machine learning Affected: 2.3.0 before 2.3.3; 2.4.0 before 2.4.2 |
| CVE-2021-29519 | 5.5 | May 14 | TensorFlow is an end-to-end open source platform for machine learning Affected: before 2.1.4; 2.2.0 before 2.2.3; 2.3.0 before 2.3.3; 2.4.0 before 2.4.2 |
| CVE-2021-29517 | 5.5 | May 14 | TensorFlow is an end-to-end open source platform for machine learning Affected: before 2.1.4; 2.2.0 before 2.2.3; 2.3.0 before 2.3.3; 2.4.0 before 2.4.2 |
| CVE-2021-29516 | 5.5 | May 14 | TensorFlow is an end-to-end open source platform for machine learning Affected: before 2.1.4; 2.2.0 before 2.2.3; 2.3.0 before 2.3.3; 2.4.0 before 2.4.2 |
| CVE-2021-29554 | 5.5 | May 14 | TensorFlow is an end-to-end open source platform for machine learning Affected: before 2.1.4; 2.2.0 before 2.2.3; 2.3.0 before 2.3.3; 2.4.0 before 2.4.2 |
| CVE-2020-15198 | 5.4 | Sep 25 | In Tensorflow before version 2.3.1, the `SparseCountSparseOutput` implementation does not validate that the input arguments form a valid sparse tensor Affected: 2.3.0 before 2.3.1 |
| CVE-2020-26266 | 5.3 | Dec 10 | In affected versions of TensorFlow under certain cases a saved model can trigger use of uninitialized values during code execution Affected: before 1.15.5; 2.0.0 before 2.0.4; 2.1.0 before 2.1.3; 2.2.0 before 2.2.2; 2.3.0 before 2.3.2 |
| CVE-2020-15204 | 5.3 | Sep 25 | In eager mode, TensorFlow before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1 does not set the session state Affected: before 1.15.4; 2.0.0 before 2.0.3; 2.1.0 before 2.1.2; 2.2.0 before 2.2.1; 2.3.0 before 2.3.1 |
| CVE-2020-15194 | 5.3 | Sep 25 | In Tensorflow before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1, the `SparseFillEmptyRowsGrad` implementation has incomplete validation of the shapes of its arguments Affected: before 1.15.4; 2.0.0 before 2.0.3; 2.1.0 before 2.1.2; 2.2.0 before 2.2.1; 2.3.0 before 2.3.1 |
| CVE-2020-15191 | 5.3 | Sep 25 | In Tensorflow before versions 2.2.1 and 2.3.1, if a user passes an invalid argument to `dlpack.to_dlpack` the expected validations will cause variables to bind to `nullptr` while… Affected: 2.2.0; 2.3.0 |
| CVE-2020-15190 | 5.3 | Sep 25 | In Tensorflow before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1, the `tf.raw_ops.Switch` operation takes as input a tensor and a boolean and outputs two tensors Affected: before 1.15.4; 2.0.0 before 2.0.3; 2.1.0 before 2.1.2; 2.2.0 before 2.2.1; 2.3.0 before 2.3.1 |
| CVE-2020-15211 | 4.8 | Sep 25 | In TensorFlow Lite before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1, saved models in the flatbuffer format use a double indexing scheme: a model has a set of subgraphs, each… Affected: before 1.15.4; 2.0.0 before 2.0.3; 2.1.0 before 2.1.2; 2.2.0 before 2.2.1; 2.3.0 before 2.3.1 |
| CVE-2020-15201 | 4.8 | Sep 25 | In Tensorflow before version 2.3.1, the `RaggedCountSparseOutput` implementation does not validate that the input arguments form a valid ragged tensor Affected: 2.3.0 |
| CVE-2020-26268 | 4.4 | Dec 10 | In affected versions of TensorFlow the tf.raw_ops.ImmutableConst operation returns a constant tensor created from a memory mapped file which is assumed immutable Affected: before 1.15.5; 2.0.0 before 2.0.4; 2.1.0 before 2.1.3; 2.2.0 before 2.2.2; 2.3.0 before 2.3.2 |
| CVE-2022-23578 | 4.3 | Feb 4 | Tensorflow is an Open Source Machine Learning Framework Affected: through 2.5.2; 2.6.0 through 2.6.2; 2.7.0 |
| CVE-2020-15192 | 4.3 | Sep 25 | In Tensorflow before versions 2.2.1 and 2.3.1, if a user passes a list of strings to `dlpack.to_dlpack` there is a memory leak following an expected validation failure Affected: 2.2.0; 2.3.0 |
| CVE-2020-15213 | 4.0 | Sep 25 | In TensorFlow Lite before versions 2.2.1 and 2.3.1, models using segment sum can trigger a denial of service by causing an out of memory allocation in the implementation of… Affected: 2.2.0 before 2.2.1; 2.3.0 before 2.3.1 |