PT-2026-59905

Impact When converting transposed convolutions using per-channel weight quantization the converter segfaults and crashes the Python process. python import tensorflow as tf class QuantConv2DTransposedtf.keras.layers.Layer: def buildself, input shape: self.kernel = self.add weight"kernel", 3, 3,...

PT-2026-59975

Impact If Conv2D is given empty input and the filter and padding sizes are valid, the output is all-zeros. This causes division-by-zero floating point exceptions that can be used to trigger a denial of service attack. python import tensorflow as tf import numpy as np with tf.device"CPU": also can...

PT-2026-59836

Impact ParameterizedTruncatedNormal assumes shape is of type int32. A valid shape of type int64 results in a mismatched type CHECK fail that can be used to trigger a denial of service attack. python import tensorflow as tf seed = 1618 seed2 = 0 shape = tf.random.uniformshape=3, minval=-10000,...

PT-2026-59896

Impact FPE in TensorListSplit with XLA python import tensorflow as tf func = tf.raw ops.TensorListSplit para = 'tensor': 1, 'element shape': -1, 'lengths': 0 @tf.functionjit compile=True def fuzz jit: y = funcpara return y printfuzz jit Patches We have patched the issue in GitHub commit...

PT-2026-59936

Impact Eig can be fed an incorrect Tout input, resulting in a CHECK fail that can trigger a denial of service attack. python import tensorflow as tf import numpy as np arg 0=tf.constantvalue=np.random.randomsize=2, 2, shape=2, 2, dtype=tf.float32 arg 1=tf.complex128 arg 2=True arg 3='' tf.raw...

PT-2026-59939

Impact When mlir::tfg::ConvertGenericFunctionToFunctionDef is given empty function attributes, it gives a null dereference. cpp // Import the function attributes with a tf. prefix to match the current // infrastructure expectations. for const auto& namedAttr : func.attr const std::string& name =...

PT-2026-59858

Impact In core/kernels/list kernels.cc's TensorListReserve, num elements is assumed to be a tensor of size 1. When a num elements of more than 1 element is provided, then tf.raw ops.TensorListReserve fails the CHECK EQ in CheckIsAlignedAndSingleElement. python import tensorflow as tf tf.raw...

PT-2026-59991

Impact DenseBincount assumes its input tensor weights to either have the same shape as its input tensor input or to be length-0. A different weights shape will trigger a CHECK fail that can be used to trigger a denial of service attack. python import tensorflow as tf binary output = True input =...

PT-2026-59815

Impact The UnbatchGradOp function takes an argument id that is assumed to be a scalar. A nonscalar id can trigger a CHECK failure and crash the program. python import numpy as np import tensorflow as tf id is not scalar tf.raw ops.UnbatchGradoriginal input= tf.constant1,batch index=tf.constant0,0...

PT-2026-59818

Impact If SparseFillEmptyRowsGrad is given empty inputs, TensorFlow will crash. python import tensorflow as tf tf.raw ops.SparseFillEmptyRowsGrad reverse index map=, grad values=, name=None Patches We have patched the issue in GitHub commit af4a6a3c8b95022c351edae94560acc61253a1b8. The fix will b...

PT-2026-59967

Impact An input token that is not a UTF-8 bytestring will trigger a CHECK fail in tf.raw ops.PyFunc. python import tensorflow as tf value = tf.constantvalue=1,2 token = b'xb0' dataType = tf.int32 tf.raw ops.PyFuncinput=value,token=token,Tout=dataType Patches We have patched the issue in GitHub...

PT-2026-59742

Impact When running on GPU, tf.image.generate bounding box proposals receives a scores input that must be of rank 4 but is not checked. python import tensorflow as tf a = tf.constantvalue=1.0, 1.0, 1.0, 1.0, 1.0, 1.0, 1.0, 1.0 b = tf.constantvalue=1 tf.image.generate bounding box...

PT-2026-59992

Impact When SetSize receives an input set shape that is not a 1D tensor, it gives a CHECK fails that can be used to trigger a denial of service attack. python import tensorflow as tf arg 0=1 arg 1=1,1 arg 2=1 arg 3=True arg 4='' tf.raw ops.SetSizeset indices=arg 0, set values=arg 1, set shape=arg...

PT-2026-59748

Impact When running with XLA, tf.raw ops.Bincount segfaults when given a parameter weights that is neither the same shape as parameter arr nor a length-0 tensor. python import tensorflow as tf func = tf.raw ops.Bincount para='arr': 6, 'size': 804, 'weights': 52, 351 @tf.functionjit compile=True d...

PT-2026-59885

Impact If SparseBincount is given inputs for indices, values, and dense shape that do not make a valid sparse tensor, it results in a segfault that can be used to trigger a denial of service attack. python import tensorflow as tf binary output = True indices = tf.random.uniformshape=,...

PT-2026-59963

Impact If Save or SaveSlices is run over tensors of an unsupported dtype, it results in a CHECK fail that can be used to trigger a denial of service attack. python import tensorflow as tf filename = tf.constant"" tensor names = tf.constant"" Save data = tf.casttf.random.uniformshape=1,...

PT-2026-59712

Impact If SparseBincount is given inputs for indices, values, and dense shape that do not make a valid sparse tensor, it results in a segfault that can be used to trigger a denial of service attack. python import tensorflow as tf binary output = True indices = tf.random.uniformshape=,...

PT-2026-59886

Impact NPE in QuantizedMatMulWithBiasAndDequantize with MKL enable python import tensorflow as tf func = tf.raw ops.QuantizedMatMulWithBiasAndDequantize para='a': tf.constant138, dtype=tf.quint8, 'b': tf.constant4, dtype=tf.qint8, 'bias': 31.81644630432129, 47.21876525878906, 109.95201110839844,...

PT-2026-59789

Impact When CollectiveGather receives an scalar input input, it gives a CHECK fails that can be used to trigger a denial of service attack. python import tensorflow as tf arg 0=1 arg 1=1 arg 2=1 arg 3=1 arg 4=3, 3,3 arg 5='auto' arg 6=0 arg 7='' tf.raw ops.CollectiveGatherinput=arg 0, group...

PT-2026-59845

Impact If Conv2D is given empty input and the filter and padding sizes are valid, the output is all-zeros. This causes division-by-zero floating point exceptions that can be used to trigger a denial of service attack. python import tensorflow as tf import numpy as np with tf.device"CPU": also can...