CVE-2020-15204

🗓️ 25 Sep 2020 19:15:15Reported by [email protected]Type

TensorFlow versions 1.15.4, 2.0.3, 2.1.2, 2.2.1, and 2.3.1 does not set session state in eager mode, leading to null pointer dereference and segmentation fault

Reporter	Title	Published	Views	Family All 68
IBM Security Bulletins	Security Bulletin: Tensor Flow security vulnerabilities on IBM Watson Machine Learning on CP4D	7 Apr 202114:04	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery for IBM Cloud Pak for Data affected by vulnerability in TensorFlow	9 Dec 202004:43	–	ibm
IBM Security Bulletins	Security Bulletin: Numerous CVE entires for TensorFlow in Watson Machine Learning Community Edition	29 Oct 202021:58	–	ibm
IBM Security Bulletins	Security Bulletin: Tensor Flow security vulnerabilities on IBM Watson Machine Learning Server	21 Apr 202115:21	–	ibm
CNVD	Google TensorFlow code issue vulnerability (CNVD-2020-54473)	28 Sep 202000:00	–	cnvd
CVE	CVE-2020-15204	25 Sep 202018:46	–	cve
Cvelist	CVE-2020-15204 Segfault in Tensorflow	25 Sep 202018:46	–	cvelist
Debian CVE	CVE-2020-15204	25 Sep 202018:46	–	debiancve
EUVD	EUVD-2020-0200	7 Oct 202500:30	–	euvd
Github Security Blog	Segfault in Tensorflow	25 Sep 202018:28	–	github

NVD

Node

google tensorflowRange<1.15.4-

google tensorflowRange2.0.0–2.0.3-

google tensorflowRange2.1.0–2.1.2-

google tensorflowRange2.2.0–2.2.1-

google tensorflowRange2.3.0–2.3.1-

Node

opensuse leapMatch15.2

Source	Link
lists	www.lists.opensuse.org/opensuse-security-announce/2020-10/msg00065.html
github	www.github.com/tensorflow/tensorflow/releases/tag/v2.3.1
github	www.github.com/tensorflow/tensorflow/commit/9a133d73ae4b4664d22bd1aa6d654fec13c52ee1
github	www.github.com/tensorflow/tensorflow/security/advisories/GHSA-q8gv-q7wr-9jf8

17 Jun 2026 02:56Current

CVSS 25

CVSS 3.15.3

EPSS0.00903

CWE-476