TE
Product
Tensorflow
431
CVEs
0
On KEV
9.9
Max CVSS
0
New 30D
Severity mix
Critical 18High 233Medium 178Low 2
Watch
Add Tensorflow to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-23590 | 7.5 | Feb 4 | Tensorflow is an Open Source Machine Learning Framework Affected: before 2.7.1 |
| CVE-2020-26269 | 7.5 | Dec 10 | In TensorFlow release candidate versions 2.4.0rc*, the general implementation for matching filesystem paths to globbing pattern is vulnerable to an access out of bounds of the… Affected: 2.4.0; 2.4.0; 2.4.0; 2.4.0; 2.4.0 |
| CVE-2020-15266 | 7.5 | Oct 21 | In Tensorflow before version 2.4.0, when the `boxes` argument of `tf.image.crop_and_resize` has a very large value, the CPU kernel implementation receives it as a C++ `nan`… Affected: before 2.4.0 |
| CVE-2020-15265 | 7.5 | Oct 21 | In Tensorflow before version 2.4.0, an attacker can pass an invalid `axis` value to `tf.quantization.quantize_and_dequantize` Affected: before 2.4.0 |
| CVE-2020-15206 | 7.5 | Sep 25 | In Tensorflow before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1, changing the TensorFlow's `SavedModel` protocol buffer and altering the name of required keys results in… Affected: before 1.15.4; 2.0.0 before 2.0.3; 2.1.0 before 2.1.2; 2.2.0 before 2.2.1; 2.3.0 before 2.3.1 |
| CVE-2020-15203 | 7.5 | Sep 25 | In Tensorflow before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1, by controlling the `fill` argument of tf.strings.as_string, a malicious attacker is able to trigger a format… Affected: before 1.15.4; 2.0.0 before 2.0.3; 2.1.0 before 2.1.2; 2.2.0 before 2.2.1; 2.3.0 before 2.3.1 |
| CVE-2020-5215 | 7.5 | Jan 28 | In TensorFlow before 1.15.2 and 2.0.1, converting a string (from Python) to a tf.float16 value results in a segmentation fault in eager mode as the format checks for this use case… Affected: before 1.15.2; 2.0.0 before 2.0.1 |
| CVE-2021-37655 | 7.3 | Aug 12 | TensorFlow is an end-to-end open source platform for machine learning Affected: 2.3.0 before 2.3.4; 2.4.0 before 2.4.3; 2.5.0; 2.6.0; 2.6.0; 2.6.0 |
| CVE-2022-29208 | 7.1 | May 20 | TensorFlow is an open source platform for machine learning Affected: before 2.6.4; 2.7.0 before 2.7.2; 2.7.0; 2.7.0; 2.8.0; 2.8.0; +3 more |
| CVE-2021-41226 | 7.1 | Nov 5 | TensorFlow is an open source platform for machine learning Affected: before 2.4.4; 2.5.0 before 2.5.2; 2.6.0 before 2.6.1 |
| CVE-2021-41224 | 7.1 | Nov 5 | TensorFlow is an open source platform for machine learning Affected: before 2.4.4; 2.5.0 before 2.5.2; 2.6.0 before 2.6.1 |
| CVE-2021-41223 | 7.1 | Nov 5 | TensorFlow is an open source platform for machine learning Affected: before 2.4.4; 2.5.0 before 2.5.2; 2.6.0 before 2.6.1 |
| CVE-2021-41212 | 7.1 | Nov 5 | TensorFlow is an open source platform for machine learning Affected: before 2.4.4; 2.5.0 before 2.5.2; 2.6.0 |
| CVE-2021-41211 | 7.1 | Nov 5 | TensorFlow is an open source platform for machine learning Affected: 2.6.0 |
| CVE-2021-41205 | 7.1 | Nov 5 | TensorFlow is an open source platform for machine learning Affected: before 2.4.4; 2.5.0 before 2.5.2; 2.6.0 before 2.6.1 |
| CVE-2021-41210 | 7.1 | Nov 5 | TensorFlow is an open source platform for machine learning Affected: before 2.4.4; 2.5.0 before 2.5.2; 2.6.0 |
| CVE-2021-37682 | 7.1 | Aug 12 | TensorFlow is an end-to-end open source platform for machine learning Affected: 2.3.0 before 2.3.4; 2.4.0 before 2.4.3; 2.5.0; 2.6.0; 2.6.0; 2.6.0 |
| CVE-2021-37664 | 7.1 | Aug 12 | TensorFlow is an end-to-end open source platform for machine learning Affected: 2.3.0 before 2.3.4; 2.4.0 before 2.4.3; 2.5.0; 2.6.0; 2.6.0; 2.6.0 |
| CVE-2021-37654 | 7.1 | Aug 12 | TensorFlow is an end-to-end open source platform for machine learning Affected: 2.3.0 before 2.3.4; 2.4.0 before 2.4.3; 2.5.0; 2.6.0; 2.6.0; 2.6.0 |
| CVE-2021-37641 | 7.1 | Aug 12 | TensorFlow is an end-to-end open source platform for machine learning Affected: 2.3.0 before 2.3.4; 2.4.0 before 2.4.3; 2.5.0; 2.6.0; 2.6.0; 2.6.0 |
| CVE-2021-37635 | 7.1 | Aug 12 | TensorFlow is an end-to-end open source platform for machine learning Affected: 2.3.0 before 2.3.4; 2.4.0 before 2.4.3; 2.5.0; 2.6.0; 2.6.0; 2.6.0 |
| CVE-2021-37643 | 7.1 | Aug 12 | TensorFlow is an end-to-end open source platform for machine learning Affected: 2.3.0 before 2.3.4; 2.4.0 before 2.4.3; 2.5.0; 2.6.0; 2.6.0; 2.6.0 |
| CVE-2021-29613 | 7.1 | May 14 | TensorFlow is an end-to-end open source platform for machine learning Affected: before 2.1.4; 2.2.0 before 2.2.3; 2.3.0 before 2.3.3; 2.4.0 before 2.4.2 |
| CVE-2021-29601 | 7.1 | May 14 | TensorFlow is an end-to-end open source platform for machine learning Affected: before 2.1.4; 2.2.0 before 2.2.3; 2.3.0 before 2.3.3; 2.4.0 before 2.4.2 |
| CVE-2021-29590 | 7.1 | May 14 | TensorFlow is an end-to-end open source platform for machine learning Affected: before 2.1.4; 2.2.0 before 2.2.3; 2.3.0 before 2.3.3; 2.4.0 before 2.4.2 |
| CVE-2021-29582 | 7.1 | May 14 | TensorFlow is an end-to-end open source platform for machine learning Affected: before 2.1.4; 2.2.0 before 2.2.3; 2.3.0 before 2.3.3; 2.4.0 before 2.4.2 |
| CVE-2021-29570 | 7.1 | May 14 | TensorFlow is an end-to-end open source platform for machine learning Affected: before 2.1.4; 2.2.0 before 2.2.3; 2.3.0 before 2.3.3; 2.4.0 before 2.4.2 |
| CVE-2021-29569 | 7.1 | May 14 | TensorFlow is an end-to-end open source platform for machine learning Affected: before 2.1.4; 2.2.0 before 2.2.3; 2.3.0 before 2.3.3; 2.4.0 before 2.4.2 |
| CVE-2021-29560 | 7.1 | May 14 | TensorFlow is an end-to-end open source platform for machine learning Affected: before 2.1.4; 2.2.0 before 2.2.3; 2.3.0 before 2.3.3; 2.4.0 before 2.4.2 |
| CVE-2021-29559 | 7.1 | May 14 | TensorFlow is an end-to-end open source platform for machine learning Affected: before 2.1.4; 2.2.0 before 2.2.3; 2.3.0 before 2.3.3; 2.4.0 before 2.4.2 |
| CVE-2021-29553 | 7.1 | May 14 | TensorFlow is an end-to-end open source platform for machine learning Affected: before 2.1.4; 2.2.0 before 2.2.3; 2.3.0 before 2.3.3; 2.4.0 before 2.4.2 |
| CVE-2021-29532 | 7.1 | May 14 | TensorFlow is an end-to-end open source platform for machine learning Affected: before 2.1.4; 2.2.0 before 2.2.3; 2.3.0 before 2.3.3; 2.4.0 before 2.4.2 |
| CVE-2020-15193 | 7.1 | Sep 25 | In Tensorflow before versions 2.2.1 and 2.3.1, the implementation of `dlpack.to_dlpack` can be made to use uninitialized memory resulting in further memory corruption Affected: 2.2.0; 2.3.0 |