PT-2026-59747

Impact TFversion 2.11.0 //tensorflow/core/ops/array ops.cc:1067 const Tensor hypothesis shape t = c-input tensor2; std::vector dimshypothesis shape t-NumElements - 1; for int i = 0; i MakeDimstd::maxh valuesi, t valuesi; if hypothesis shape t is empty, hypothesis shape t-NumElements - 1 will be...

PT-2026-59872

Impact The implementation of AvgPool3DGradOp does not fully validate the input orig input shape. This results in an overflow that results in a CHECK failure which can be used to trigger a denial of service attack: python import tensorflow as tf ksize = 1, 1, 1, 1, 1 strides = 1, 1, 1, 1, 1 paddin...

PT-2026-59807

Impact array ops.upper bound causes a segfault when not given a rank 2 tensor. Patches We have patched the issue in GitHub commit 915884fdf5df34aaedd00fc6ace33a2cfdefa586. The fix will be included in TensorFlow 2.13. We will also cherrypick this commit in TensorFlow 2.12.1. For more information...

PT-2026-59860

Impact If QuantizedRelu or QuantizedRelu6 are given nonscalar inputs for min features or max features, it results in a segfault that can be used to trigger a denial of service attack. python import tensorflow as tf out type = tf.quint8 features = tf.constant28, shape=4,2, dtype=tf.quint8 min...

PT-2026-59877

Impact If a list of quantized tensors is assigned to an attribute, the pywrap code fails to parse the tensor and returns a nullptr, which is not caught. An example can be seen in tf.compat.v1.extract volume patches by passing in quantized tensors as input ksizes. python import numpy as np import...

PT-2026-59725

Impact When SparseSparseMaximum is given invalid sparse tensors as inputs, it can give an NPE. python import tensorflow as tf tf.raw ops.SparseSparseMaximum a indices=1, a values = 0.1 , a shape = 2, b indices=, b values =2 , b shape = 2, Patches We have patched the issue in GitHub commit...

PT-2026-59907

Impact TFversion 2.11.0 //tensorflow/core/ops/array ops.cc:1067 const Tensor hypothesis shape t = c-input tensor2; std::vector dimshypothesis shape t-NumElements - 1; for int i = 0; i MakeDimstd::maxh valuesi, t valuesi; if hypothesis shape t is empty, hypothesis shape t-NumElements - 1 will be...

PT-2026-59896

Impact FPE in TensorListSplit with XLA python import tensorflow as tf func = tf.raw ops.TensorListSplit para = 'tensor': 1, 'element shape': -1, 'lengths': 0 @tf.functionjit compile=True def fuzz jit: y = funcpara return y printfuzz jit Patches We have patched the issue in GitHub commit...

PT-2026-59986

Impact If QuantizedRelu or QuantizedRelu6 are given nonscalar inputs for min features or max features, it results in a segfault that can be used to trigger a denial of service attack. python import tensorflow as tf out type = tf.quint8 features = tf.constant28, shape=4,2, dtype=tf.quint8 min...

PT-2026-59977

Impact If LowerBound or UpperBound is given an emptysorted inputs input, it results in a nullptr dereference, leading to a segfault that can be used to trigger a denial of service attack. python import tensorflow as tf out type = tf.int32 sorted inputs = tf.constant, shape=10,0, dtype=tf.float32...

PT-2026-59898

Impact If tf.raw ops.TensorListConcat is given element shape=, it results segmentation fault which can be used to trigger a denial of service attack. python import tensorflow as tf tf.raw ops.TensorListConcat input handle=tf.data.experimental.to varianttf.data.Dataset.from tensor slices1, 2, 3,...

PT-2026-59891

Impact When SparseSparseMaximum is given invalid sparse tensors as inputs, it can give an NPE. python import tensorflow as tf tf.raw ops.SparseSparseMaximum a indices=1, a values = 0.1 , a shape = 2, b indices=, b values =2 , b shape = 2, Patches We have patched the issue in GitHub commit...

PT-2026-59941

Impact When tensorflow::full type::SubstituteFromAttrs receives a FullTypeDef& t that is not exactly three args, it triggers a CHECK-fail instead of returning a status. cpp Status SubstituteForEachAttrMap& attrs, FullTypeDef& t DCHECK EQt.args size, 3; const auto& cont = t.args0; const auto& tmpl...

PT-2026-59702

Impact The implementation of AvgPoolGrad does not fully validate the input orig input shape. This results in a CHECK failure which can be used to trigger a denial of service attack: python import tensorflow as tf ksize = 1, 2, 2, 1 strides = 1, 2, 2, 1 padding = "VALID" data format = "NHWC" orig...

PT-2026-59982

Impact An input encoded that is not a valid CompositeTensorVariant tensor will trigger a segfault in tf.raw ops.CompositeTensorVariantToComponents. python import tensorflow as tf encode = tf.raw ops.EmptyTensorListelement dtype=tf.int32, element shape=10, 15, max num elements=2 meta= ""...

PT-2026-59937

Impact The function MakeGrapplerFunctionItem takes arguments that determine the sizes of inputs and outputs. If the inputs given are greater than or equal to the sizes of the outputs, an out-of-bounds memory read or a crash is triggered. python import tensorflow as tf @tf.function def test: tf.ra...

PT-2026-59906

Impact When mlir::tfg::TFOp::nameAttr receives null type list attributes, it crashes. cpp StatusOr GraphDefImporter::ArgNumTypeconst NamedAttrList &attrs, const OpDef::ArgDef &arg def, SmallVectorImpl &types // Check whether a type list attribute is specified. if !arg def.type list attr.empty if...

PT-2026-59735

Impact If tf.raw ops.TensorListConcat is given element shape=, it results segmentation fault which can be used to trigger a denial of service attack. python import tensorflow as tf tf.raw ops.TensorListConcat input handle=tf.data.experimental.to varianttf.data.Dataset.from tensor slices1, 2, 3,...

PT-2026-59705

Impact Inputs dense features or example state data not of rank 2 will trigger a CHECK fail in SdcaOptimizer. python import tensorflow as tf tf.raw ops.SdcaOptimizer sparse example indices=4 tf.random.uniform5,5,5,3, dtype=tf.dtypes.int64, maxval=100, sparse feature indices=4...

PT-2026-59767

Impact If FakeQuantWithMinMaxVars is given min or max tensors of a nonzero rank, it results in a CHECK fail that can be used to trigger a denial of service attack. python import tensorflow as tf num bits = 8 narrow range = False inputs = tf.constant0, shape=2,3, dtype=tf.float32 min = tf.constant...