PT-2026-59907

Impact TFversion 2.11.0 //tensorflow/core/ops/array ops.cc:1067 const Tensor hypothesis shape t = c-input tensor2; std::vector dimshypothesis shape t-NumElements - 1; for int i = 0; i MakeDimstd::maxh valuesi, t valuesi; if hypothesis shape t is empty, hypothesis shape t-NumElements - 1 will be...

PT-2026-59803

Impact When AudioSummaryV2 receives an input sample rate with more than one element, it gives a CHECK fails that can be used to trigger a denial of service attack. python import tensorflow as tf arg 0='' arg 1=tf.random.uniformshape=1,1, dtype=tf.float32, maxval=None arg...

PT-2026-59977

Impact If LowerBound or UpperBound is given an emptysorted inputs input, it results in a nullptr dereference, leading to a segfault that can be used to trigger a denial of service attack. python import tensorflow as tf out type = tf.int32 sorted inputs = tf.constant, shape=10,0, dtype=tf.float32...

PT-2026-59954

Impact If SparseFillEmptyRowsGrad is given empty inputs, TensorFlow will crash. python import tensorflow as tf tf.raw ops.SparseFillEmptyRowsGrad reverse index map=, grad values=, name=None Patches We have patched the issue in GitHub commit af4a6a3c8b95022c351edae94560acc61253a1b8. The fix will b...

PT-2026-59833

Impact When Unbatch receives a nonscalar input id, it gives a CHECK fail that can trigger a denial of service attack. python import tensorflow as tf import numpy as np arg 0=tf.constantvalue=np.random.randomsize=3, 3, 1, dtype=tf.float64 arg 1=tf.constantvalue=np.random.randint0,100,size=3, 3, 1,...

PT-2026-59795

Impact The function MakeGrapplerFunctionItem takes arguments that determine the sizes of inputs and outputs. If the inputs given are greater than or equal to the sizes of the outputs, an out-of-bounds memory read or a crash is triggered. python import tensorflow as tf @tf.function def test: tf.ra...

PT-2026-59861

Impact If QuantizeDownAndShrinkRange is given nonscalar inputs for input min or input max, it results in a segfault that can be used to trigger a denial of service attack. python import tensorflow as tf out type = tf.quint8 input = tf.constant1, shape=3, dtype=tf.qint32 input min = tf.constant,...

PT-2026-59806

Impact NPE in RandomShuffle with XLA enable python import tensorflow as tf func = tf.raw ops.RandomShuffle para = 'value': 1e+20, 'seed': -4294967297, 'seed2': -2147483649 @tf.functionjit compile=True def test: y = funcpara return y test Patches We have patched the issue in GitHub commit...

PT-2026-59811

Impact If BCast::ToShape is given input larger than an int32, it will crash, despite being supposed to handle up to an int64. An example can be seen in tf.experimental.numpy.outer by passing in large input to the input b. python import tensorflow as tf value = tf.constantshape=2, 1024, 1024, 1024...

PT-2026-59947

Impact If BCast::ToShape is given input larger than an int32, it will crash, despite being supposed to handle up to an int64. An example can be seen in tf.experimental.numpy.outer by passing in large input to the input b. python import tensorflow as tf value = tf.constantshape=2, 1024, 1024, 1024...

PT-2026-59782

Impact If FractionMaxPoolGrad is given outsize inputs row pooling sequence and col pooling sequence, TensorFlow will crash. python import tensorflow as tf tf.raw ops.FractionMaxPoolGrad orig input = 1, 1, 1, 1, 1, orig output = 1, 1, 1, out backprop = 3, 3, 6, row pooling sequence = -0x4000000, 1...

PT-2026-59204

Summary TensorFlow / Keras continues to honor HDF5 “external storage” and ExternalLink features when loading weights. A malicious .weights.h5 or a .keras archive embedding such weights can direct load weights to read from an arbitrary readable filesystem path. The bytes pulled from that path...

PT-2026-59876

Impact An input pooling ratio that is smaller than 1 will trigger a heap OOB in tf.raw ops.FractionalMaxPool and tf.raw ops.FractionalAvgPool. Patches We have patched the issue in GitHub commit 216525144ee7c910296f5b05d214ca1327c9ce48. The fix will be included in TensorFlow 2.11.0. We will also...

PT-2026-59797

Impact When mlir::tfg::ConvertGenericFunctionToFunctionDef is given empty function attributes, it gives a null dereference. cpp // Import the function attributes with a tf. prefix to match the current // infrastructure expectations. for const auto& namedAttr : func.attr const std::string& name =...

PT-2026-59802

Impact An input sparse matrix that is not a matrix with a shape with rank 0 will trigger a CHECK fail in tf.raw ops.SparseMatrixNNZ. python import tensorflow as tf tf.raw ops.SparseMatrixNNZsparse matrix= Patches We have patched the issue in GitHub commit f856d02e5322821aad155dad9b3acab1e9f5d693...

PT-2026-59832

Impact The AvgPoolOp function takes an argument ksize that must be positive but is not checked. A negative ksize can trigger a CHECK failure and crash the program. python import tensorflow as tf import numpy as np value = np.ones1, 1, 1, 1 ksize = 1, 1e20, 1, 1 strides = 1, 1, 1, 1 padding = 'SAM...

PT-2026-59961

Impact When mlir::tfg::ConvertGenericFunctionToFunctionDef is given empty function attributes, it crashes. cpp // We pre-allocate the array of operands and populate it using the // output name to position and control output to position populated // previously. SmallVector ret valsfunc.ret size +...

PT-2026-59969

Impact ParameterizedTruncatedNormal assumes shape is of type int32. A valid shape of type int64 results in a mismatched type CHECK fail that can be used to trigger a denial of service attack. python import tensorflow as tf seed = 1618 seed2 = 0 shape = tf.random.uniformshape=3, minval=-10000,...

PT-2026-59992

Impact When SetSize receives an input set shape that is not a 1D tensor, it gives a CHECK fails that can be used to trigger a denial of service attack. python import tensorflow as tf arg 0=1 arg 1=1,1 arg 2=1 arg 3=True arg 4='' tf.raw ops.SetSizeset indices=arg 0, set values=arg 1, set shape=arg...

PT-2026-59815

Impact The UnbatchGradOp function takes an argument id that is assumed to be a scalar. A nonscalar id can trigger a CHECK failure and crash the program. python import numpy as np import tensorflow as tf id is not scalar tf.raw ops.UnbatchGradoriginal input= tf.constant1,batch index=tf.constant0,0...