PYSEC-2026-3304 TensorFlow vulnerable to `CHECK` fail in `QuantizeAndDequantizeV3`

Impact If QuantizeAndDequantizeV3 is given a nonscalar numbits input tensor, it results in a CHECK fail that can be used to trigger a denial of service attack. python import tensorflow as tf signedinput = True rangegiven = False narrowrange = False axis = -1 input = tf.constant-3.5, shape=1,...

PYSEC-2026-3215 TensorFlow vulnerable to `CHECK` failure in `AvgPoolOp`

Impact The AvgPoolOp function takes an argument ksize that must be positive but is not checked. A negative ksize can trigger a CHECK failure and crash the program. python import tensorflow as tf import numpy as np value = np.ones1, 1, 1, 1 ksize = 1, 1e20, 1, 1 strides = 1, 1, 1, 1 padding = 'SAM...

PYSEC-2026-3128 TensorFlow segfault TFLite converter on per-channel quantized transposed convolutions

Impact When converting transposed convolutions using per-channel weight quantization the converter segfaults and crashes the Python process. python import tensorflow as tf class QuantConv2DTransposedtf.keras.layers.Layer: def buildself, inputshape: self.kernel = self.addweight"kernel", 3, 3,...

TensorFlow segfault TFLite converter on per-channel quantized transposed convolutions

ImpactWhen converting transposed convolutions using per-channel weight quantization the converter segfaults and crashes the Python process.pythonimport tensorflow as tfclass QuantConv2DTransposedtf.keras.layers.Layer: def buildself, inputshape: self.kernel = self.addweight"kernel", 3, 3,...

PT-2026-59980

Impact If the stride and window size are not positive for tf.raw ops.AvgPoolGrad, it can give an FPE. python import tensorflow as tf import numpy as np @tf.functionjit compile=True def test: y = tf.raw ops.AvgPoolGradorig input shape=1,0,0,0, grad=0.39117979, ksize=1,0,0,0, strides=1,0,0,0,...

PT-2026-59974

Impact The implementation of Conv2DBackpropInput requires input sizes to be 4-dimensional. Otherwise, it gives a CHECK failure which can be used to trigger a denial of service attack: python import tensorflow as tf strides = 1, 1, 1, 1 padding = "SAME" use cudnn on gpu = True explicit paddings =...

PT-2026-59999

Improper buffer restrictions in the IntelR Optimization for Tensorflow software before version 2.12 may allow an authenticated user to potentially enable escalation of privilege via local access...

PT-2026-59204

Summary TensorFlow / Keras continues to honor HDF5 “external storage” and ExternalLink features when loading weights. A malicious .weights.h5 or a .keras archive embedding such weights can direct load weights to read from an arbitrary readable filesystem path. The bytes pulled from that path...

PT-2026-59876

Impact An input pooling ratio that is smaller than 1 will trigger a heap OOB in tf.raw ops.FractionalMaxPool and tf.raw ops.FractionalAvgPool. Patches We have patched the issue in GitHub commit 216525144ee7c910296f5b05d214ca1327c9ce48. The fix will be included in TensorFlow 2.11.0. We will also...

PT-2026-59853

Impact When RangeSize receives values that do not fit into an int64 t, it crashes. cpp auto size = std::is integral::value ? Eigen::numext::abslimit - start + Eigen::numext::absdelta - T1 / Eigen::numext::absdelta : Eigen::numext::ceil Eigen::numext::abslimit - start / delta; // This check does n...

PT-2026-59797

Impact When mlir::tfg::ConvertGenericFunctionToFunctionDef is given empty function attributes, it gives a null dereference. cpp // Import the function attributes with a tf. prefix to match the current // infrastructure expectations. for const auto& namedAttr : func.attr const std::string& name =...

PT-2026-59799

Impact A malicious invalid input crashes a tensorflow model Check Failed and can be used to trigger a denial of service attack. To minimize the bug, we built a simple single-layer TensorFlow model containing a Convolution3DTranspose layer, which works well with expected inputs and can be deployed...

PT-2026-59734

Impact When ctx-step containter is a null ptr, the Lookup function will be executed with a null pointer. python import tensorflow as tf tf.raw ops.TensorArrayConcatV2handle='a', 'b', flow in = 0.1, dtype=tf.int32, element shape except0=1 Patches We have patched the issue in GitHub commit...

PT-2026-59738

Impact Out of bounds read in GRUBlockCellGrad python func = tf.raw ops.GRUBlockCellGrad para = 'x': 21.1, 156.2, 83.3, 115.4, 'h prev': array136.5, 136.6, 'w ru': array26.7, 0.8, 47.9, 26.1, 26.2, 26.3, 'w c': array 0.4, 31.5, 0.6, 'b ru': array0.1, 0.2 , dtype=float32, 'b c': 0x41414141, 'r':...

PT-2026-59897

Impact When ctx-step containter is a null ptr, the Lookup function will be executed with a null pointer. python import tensorflow as tf tf.raw ops.TensorArrayConcatV2handle='a', 'b', flow in = 0.1, dtype=tf.int32, element shape except0=1 Patches We have patched the issue in GitHub commit...

PT-2026-59901

Impact Out of bounds read in GRUBlockCellGrad python func = tf.raw ops.GRUBlockCellGrad para = 'x': 21.1, 156.2, 83.3, 115.4, 'h prev': array136.5, 136.6, 'w ru': array26.7, 0.8, 47.9, 26.1, 26.2, 26.3, 'w c': array 0.4, 31.5, 0.6, 'b ru': array0.1, 0.2 , dtype=float32, 'b c': 0x41414141, 'r':...

PT-2026-59793

Impact Integer overflow occurs when 2^31 = num frames height width channels 2^32, for example Full HD screencast of at least 346 frames. python import urllib.request dat =...

PT-2026-59806

Impact NPE in RandomShuffle with XLA enable python import tensorflow as tf func = tf.raw ops.RandomShuffle para = 'value': 1e+20, 'seed': -4294967297, 'seed2': -2147483649 @tf.functionjit compile=True def test: y = funcpara return y test Patches We have patched the issue in GitHub commit...

PT-2026-59795

Impact The function MakeGrapplerFunctionItem takes arguments that determine the sizes of inputs and outputs. If the inputs given are greater than or equal to the sizes of the outputs, an out-of-bounds memory read or a crash is triggered. python import tensorflow as tf @tf.function def test: tf.ra...

PT-2026-59937

Impact The function MakeGrapplerFunctionItem takes arguments that determine the sizes of inputs and outputs. If the inputs given are greater than or equal to the sizes of the outputs, an out-of-bounds memory read or a crash is triggered. python import tensorflow as tf @tf.function def test: tf.ra...