PT-2026-59755

Impact If a graph node is invalid, TensorFlow can leak memory in the implementation of ImmutableExecutorState::Initialize: cc Status s = params .create kerneln-properties, &item-kernel; if !s.ok item-kernel = nullptr; s = AttachDefs, n; return s; Here, we set item-kernel to nullptr but it is a...

cogdata (>=0.0.6, <=0.0.7), icetk (>=0.0.5, <=0.0.7) +3 more potentially affected by CVE-2026-0994 via protobuf (3.19.0rc2)

protobuf PYPI version 3.19.0rc2 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - cogdata =0.0.6, =0.0.5, =3.0.0a2, =4.7.2 - motion-master-proto 5.2.0 - tensorflow-checkpoint-reader 0.1.2 Source cves: CVE-2026-0994 Source...

hydra-rbp (>=0.1.21.29, <=0.1.21.38), phasespace (>=1.5.0, <=1.6.0) +4 more potentially affected by CVE-2025-12060 via keras (2.7.0rc2)

keras PYPI version 2.7.0rc2 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - hydra-rbp =0.1.21.29, =1.5.0, =2.6.0rc1, =0.18.0.dev20210402154254, =0.3.0, =0.3.2 Source cves: CVE-2025-12060 Source advisory: OSV:PYSEC-2026-1486...

tensorflow (2.6.0rc0) potentially affected by CVE-2025-12060 via keras (2.6.0rc0)

keras PYPI version 2.6.0rc0 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - tensorflow 2.6.0rc0 Source cves: CVE-2025-12060 Source advisory: OSV:PYSEC-2026-1486...

genet (>=0.11.0, <=0.17.2), mup-tf (0.0.3) +4 more potentially affected by CVE-2025-12058 via keras (2.11.0rc3)

keras PYPI version 2.11.0rc3 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - genet =0.11.0, =2.10.0rc1, =2.10.0rc1, =2.10.0rc1, =2.11.0rc0 - tensorflow-text 2.9.0rc1 Source cves: CVE-2025-12058 Source advisory:...

axcorsrmri (0.0.1), behavython (>=0.7.0, <=0.9.8) +8 more potentially affected by CVE-2025-12058 via keras (2.12.0rc1)

keras PYPI version 2.12.0rc1 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - axcorsrmri 0.0.1 - behavython =0.7.0, =0.3.21, =0.1.5, =0.29.0, =2.11.0rc1, =2.11.0rc1, =2.11.0rc1, =2.11.0rc2 - tensorflow-text 2.10.0rc0 Source...

Hugging Face Transformers Regular Expression Denial of Service (ReDoS) vulnerability

A Regular Expression Denial of Service ReDoS vulnerability exists in the Hugging Face Transformers library, specifically in the converttfweightnametoptweightname function. This function, responsible for converting TensorFlow weight names to PyTorch format, uses a regex pattern /^/^// that can be...

cogdata (>=0.0.6, <=0.0.7), icetk (>=0.0.5, <=0.0.7) +3 more potentially affected by CVE-2025-4565 via protobuf (3.19.0rc2)

protobuf PYPI version 3.19.0rc2 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - cogdata =0.0.6, =0.0.5, =3.0.0a2, =4.7.2 - motion-master-proto 5.2.0 - tensorflow-checkpoint-reader 0.1.2 Source cves: CVE-2025-4565 Source...

TensorFlow has segfault in array_ops.upper_bound

Impactarrayops.upperbound causes a segfault when not given a rank 2 tensor. PatchesWe have patched the issue in GitHub commit 915884fdf5df34aaedd00fc6ace33a2cfdefa586.The fix will be included in TensorFlow 2.13. We will also cherrypick this commit in TensorFlow 2.12.1. For more informationPlease...

PYSEC-2026-1962 TensorFlow has segfault in array_ops.upper_bound

Impact arrayops.upperbound causes a segfault when not given a rank 2 tensor. Patches We have patched the issue in GitHub commit 915884fdf5df34aaedd00fc6ace33a2cfdefa586. The fix will be included in TensorFlow 2.13. We will also cherrypick this commit in TensorFlow 2.12.1. For more information...

Invalid char to bool conversion when printing a tensor

ImpactWhen printing a tensor, we get it's data as a const char array since that's the underlying storage and then we typecast it to the element type. However, conversions from char to bool are undefined if the char is not 0 or 1, so sanitizers/fuzzers will crash. PatchesWe have patched the issue ...

PYSEC-2026-1954 Invalid char to bool conversion when printing a tensor

Impact When printing a tensor, we get it's data as a const char array since that's the underlying storage and then we typecast it to the element type. However, conversions from char to bool are undefined if the char is not 0 or 1, so sanitizers/fuzzers will crash. Patches We have patched the issu...

MLFlow unsafe deserialization

Deserialization of untrusted data can occur in versions of the MLflow platform running version 2.0.0rc0 or newer, enabling a maliciously uploaded Tensorflow model to run arbitrary code on an end user’s system when interacted with...

PYSEC-2026-1654 MLFlow unsafe deserialization

Deserialization of untrusted data can occur in versions of the MLflow platform running version 2.0.0rc0 or newer, enabling a maliciously uploaded Tensorflow model to run arbitrary code on an end user’s system when interacted with...

PYSEC-2026-1465 Authenticated Local Privilege Escalation vulnerability in Intel Optimization for Tensorflow

Improper buffer restrictions in the IntelR Optimization for Tensorflow software before version 2.12 may allow an authenticated user to potentially enable escalation of privilege via local access...

Authenticated Local Privilege Escalation vulnerability in Intel Optimization for Tensorflow

Improper buffer restrictions in the IntelR Optimization for Tensorflow software before version 2.12 may allow an authenticated user to potentially enable escalation of privilege via local access...

c4v-py (>=0.1.0.dev1, <=0.1.0.dev202107081840), cifar-10-model (7.4.0) +17 more potentially affected by CVE-2023-25661 via tensorflow-cpu (>=2.1.0, <=2.11.0)

tensorflow-cpu PYPI version =2.1.0, =0.1.0.dev1, =0.1.0b1, =0.1.2, =1.0.0, =0.0.4, =1.5.0, =0.1.3, =0.5.1, =0.102.0.dev0, =0.208.0.post1 and more Source cves: CVE-2023-25661 Source advisory: OSV:PYSEC-2026-1952...

aggmap (>=1.1.1, <=1.2.1), animl (>=1.1.2, <=1.1.4) +54 more potentially affected by CVE-2023-25660 via tensorflow-gpu (>=2.0.0, <=2.10.1)

tensorflow-gpu PYPI version =2.0.0, =1.1.1, =1.1.2, =0.0.1, =0.0.9, =0.2.1, =0.1.0, =0.0.4, =1.1.1, =1.1.0, =0.1.1, =0.3.2 and more Source cves: CVE-2023-25660 Source advisory: OSV:PYSEC-2026-1963...

vcap (>=0.2.4.dev13, <=0.3.1) potentially affected by CVE-2023-25660 via tensorflow-gpu (1.15.4)

tensorflow-gpu PYPI version 1.15.4 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow-gpu and may be impacted: - vcap =0.2.4.dev13, =0.3.1 Source cves: CVE-2023-25660 Source advisory: OSV:PYSEC-2026-1963...

dragonn (0.4.2), dream-on-gym (0.0.1) +5 more potentially affected by CVE-2023-25665 via tensorflow-gpu (1.15.0)

tensorflow-gpu PYPI version 1.15.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow-gpu and may be impacted: - dragonn 0.4.2 - dream-on-gym 0.0.1 - ml4a =0.1.0, =0.0.3, =0.3.0, =0.9.0, =0.0.5, =0.0.88 Source cves: CVE-2023-25665 Source...