PT-2026-59944

Impact NPE in RandomShuffle with XLA enable python import tensorflow as tf func = tf.raw ops.RandomShuffle para = 'value': 1e+20, 'seed': -4294967297, 'seed2': -2147483649 @tf.functionjit compile=True def test: y = funcpara return y test Patches We have patched the issue in GitHub commit...

PT-2026-59797

Impact When mlir::tfg::ConvertGenericFunctionToFunctionDef is given empty function attributes, it gives a null dereference. cpp // Import the function attributes with a tf. prefix to match the current // infrastructure expectations. for const auto& namedAttr : func.attr const std::string& name =...

PT-2026-59793

Impact Integer overflow occurs when 2^31 = num frames height width channels 2^32, for example Full HD screencast of at least 346 frames. python import urllib.request dat =...

PT-2026-59800

Impact If QuantizedInstanceNorm is given x min or x max tensors of a nonzero rank, it results in a segfault that can be used to trigger a denial of service attack. python import tensorflow as tf output range given = False given y min = 0 given y max = 0 variance epsilon = 1e-05 min separation =...

PT-2026-59799

Impact A malicious invalid input crashes a tensorflow model Check Failed and can be used to trigger a denial of service attack. To minimize the bug, we built a simple single-layer TensorFlow model containing a Convolution3DTranspose layer, which works well with expected inputs and can be deployed...

PT-2026-59769

Impact If FakeQuantWithMinMaxVarsPerChannel is given min or max tensors of a rank other than one, it results in a CHECK fail that can be used to trigger a denial of service attack. python import tensorflow as tf num bits = 8 narrow range = False inputs = tf.constant0, shape=4, dtype=tf.float32 mi...

PT-2026-59802

Impact An input sparse matrix that is not a matrix with a shape with rank 0 will trigger a CHECK fail in tf.raw ops.SparseMatrixNNZ. python import tensorflow as tf tf.raw ops.SparseMatrixNNZsparse matrix= Patches We have patched the issue in GitHub commit f856d02e5322821aad155dad9b3acab1e9f5d693...

PT-2026-59772

Impact When TensorListFromTensor receives an element shape of a rank greater than one, it gives a CHECK fail that can trigger a denial of service attack. python import tensorflow as tf arg 0=tf.random.uniformshape=6, 6, 2, dtype=tf.bfloat16, maxval=None arg 1=tf.random.uniformshape=6, 9, 1, 3,...

PT-2026-59809

Impact If MirrorPadGrad is given outsize input paddings, TensorFlow will give a heap OOB error. python import tensorflow as tf tf.raw ops.MirrorPadGradinput=1, paddings=0x77f00000,0xa000000, mode = 'REFLECT' Patches We have patched the issue in GitHub commit...

PT-2026-59786

Impact version:2.11.0 //core/ops/audio ops.cc:70 Status SpectrogramShapeFnInferenceContext c ShapeHandle input; TF RETURN IF ERRORc-WithRankc-input0, 2, &input; int32 t window size; TF RETURN IF ERRORc-GetAttr"window size", &window size; int32 t stride; TF RETURN IF ERRORc-GetAttr"stride", &strid...

PT-2026-59782

Impact If FractionMaxPoolGrad is given outsize inputs row pooling sequence and col pooling sequence, TensorFlow will crash. python import tensorflow as tf tf.raw ops.FractionMaxPoolGrad orig input = 1, 1, 1, 1, 1, orig output = 1, 1, 1, out backprop = 3, 3, 6, row pooling sequence = -0x4000000, 1...

PT-2026-59918

Impact If QuantizeAndDequantizeV3 is given a nonscalar num bits input tensor, it results in a CHECK fail that can be used to trigger a denial of service attack. python import tensorflow as tf signed input = True range given = False narrow range = False axis = -1 input = tf.constant-3.5, shape=1,...

PT-2026-59914

Impact If the parameter indices for DynamicStitch does not match the shape of the parameter data, it can trigger an stack OOB read. python import tensorflow as tf func = tf.raw ops.DynamicStitch para='indices': 0xdeadbeef, 405, 519, 758, 1015, 'data': 110.27793884277344, 120.29475402832031,...

PT-2026-59911

Impact tf.keras.losses.poisson receives a y pred and y true that are passed through functor::mul in BinaryOp. If the resulting dimensions overflow an int32, TensorFlow will crash due to a size mismatch during broadcast assignment. python import numpy as np import tensorflow as tf true value =...

PT-2026-59904

Impact When tf.raw ops.FusedResizeAndPadConv2D is given a large tensor shape, it overflows. python import tensorflow as tf mode = "REFLECT" strides = 1, 1, 1, 1 padding = "SAME" resize align corners = False input = tf.constant147, shape=3,3,1,1, dtype=tf.float16 size =...

PT-2026-59877

Impact If a list of quantized tensors is assigned to an attribute, the pywrap code fails to parse the tensor and returns a nullptr, which is not caught. An example can be seen in tf.compat.v1.extract volume patches by passing in quantized tensors as input ksizes. python import numpy as np import...

PT-2026-59917

Impact If LRNGrad is given an output image input tensor that is not 4-D, it results in a CHECK fail that can be used to trigger a denial of service attack. python import tensorflow as tf depth radius = 1 bias = 1.59018219 alpha = 0.117728651 beta = 0.404427052 input grads =...

PT-2026-59872

Impact The implementation of AvgPool3DGradOp does not fully validate the input orig input shape. This results in an overflow that results in a CHECK failure which can be used to trigger a denial of service attack: python import tensorflow as tf ksize = 1, 1, 1, 1, 1 strides = 1, 1, 1, 1, 1 paddin...

PT-2026-59870

Impact When SetSize receives an input set shape that is not a 1D tensor, it gives a CHECK fails that can be used to trigger a denial of service attack. python import tensorflow as tf arg 0=1 arg 1=1,1 arg 2=1 arg 3=True arg 4='' tf.raw ops.SetSizeset indices=arg 0, set values=arg 1, set shape=arg...

PT-2026-59866

Impact tf.raw ops.DynamicStitch specifies input sizes when it is registered. cpp REGISTER OP"DynamicStitch" .Input"indices: N int32" .Input"data: N T" .Output"merged: T" .Attr"N : int = 1" .Attr"T : type" .SetShapeFnDynamicStitchShapeFunction; When it receives a differing number of inputs, such a...