PT-2026-59962

Impact If RaggedTensorToVariant is given a rt nested splits list that contains tensors of ranks other than one, it results in a CHECK fail that can be used to trigger a denial of service attack. python import tensorflow as tf batched input = True rt nested splits = tf.constant0,32,64, shape=3,...

PT-2026-59966

Impact When Unbatch receives a nonscalar input id, it gives a CHECK fail that can trigger a denial of service attack. python import tensorflow as tf import numpy as np arg 0=tf.constantvalue=np.random.randomsize=3, 3, 1, dtype=tf.float64 arg 1=tf.constantvalue=np.random.randint0,100,size=3, 3, 1,...

PT-2026-59764

Impact If LRNGrad is given an output image input tensor that is not 4-D, it results in a CHECK fail that can be used to trigger a denial of service attack. python import tensorflow as tf depth radius = 1 bias = 1.59018219 alpha = 0.117728651 beta = 0.404427052 input grads =...

PT-2026-59801

Impact When tensorflow::full type::SubstituteFromAttrs receives a FullTypeDef& t that is not exactly three args, it triggers a CHECK-fail instead of returning a status. cpp Status SubstituteForEachAttrMap& attrs, FullTypeDef& t DCHECK EQt.args size, 3; const auto& cont = t.args0; const auto& tmpl...

PT-2026-59803

Impact When AudioSummaryV2 receives an input sample rate with more than one element, it gives a CHECK fails that can be used to trigger a denial of service attack. python import tensorflow as tf arg 0='' arg 1=tf.random.uniformshape=1,1, dtype=tf.float32, maxval=None arg...

PT-2026-59921

Impact When TensorListFromTensor receives an element shape of a rank greater than one, it gives a CHECK fail that can trigger a denial of service attack. python import tensorflow as tf arg 0=tf.random.uniformshape=6, 6, 2, dtype=tf.bfloat16, maxval=None arg 1=tf.random.uniformshape=6, 9, 1, 3,...

PT-2026-59941

Impact When tensorflow::full type::SubstituteFromAttrs receives a FullTypeDef& t that is not exactly three args, it triggers a CHECK-fail instead of returning a status. cpp Status SubstituteForEachAttrMap& attrs, FullTypeDef& t DCHECK EQt.args size, 3; const auto& cont = t.args0; const auto& tmpl...

PT-2026-59943

Impact When AudioSummaryV2 receives an input sample rate with more than one element, it gives a CHECK fails that can be used to trigger a denial of service attack. python import tensorflow as tf arg 0='' arg 1=tf.random.uniformshape=1,1, dtype=tf.float32, maxval=None arg...

PT-2026-59900

Impact If QuantizedMatMul is given nonscalar input for: - min a - max a - min b - max b It gives a segfault that can be used to trigger a denial of service attack. python import tensorflow as tf Toutput = tf.qint32 transpose a = False transpose b = False Tactivation = tf.quint8 a = tf.constant7,...

PT-2026-59940

Impact If QuantizedInstanceNorm is given x min or x max tensors of a nonzero rank, it results in a segfault that can be used to trigger a denial of service attack. python import tensorflow as tf output range given = False given y min = 0 given y max = 0 variance epsilon = 1e-05 min separation =...

PT-2026-59987

Impact If QuantizeDownAndShrinkRange is given nonscalar inputs for input min or input max, it results in a segfault that can be used to trigger a denial of service attack. python import tensorflow as tf out type = tf.quint8 input = tf.constant1, shape=3, dtype=tf.qint32 input min = tf.constant,...

PT-2026-59849

Impact If LowerBound or UpperBound is given an emptysorted inputs input, it results in a nullptr dereference, leading to a segfault that can be used to trigger a denial of service attack. python import tensorflow as tf out type = tf.int32 sorted inputs = tf.constant, shape=10,0, dtype=tf.float32...

PT-2026-59807

Impact array ops.upper bound causes a segfault when not given a rank 2 tensor. Patches We have patched the issue in GitHub commit 915884fdf5df34aaedd00fc6ace33a2cfdefa586. The fix will be included in TensorFlow 2.13. We will also cherrypick this commit in TensorFlow 2.12.1. For more information...

PT-2026-59809

Impact If MirrorPadGrad is given outsize input paddings, TensorFlow will give a heap OOB error. python import tensorflow as tf tf.raw ops.MirrorPadGradinput=1, paddings=0x77f00000,0xa000000, mode = 'REFLECT' Patches We have patched the issue in GitHub commit...

PT-2026-59795

Impact The function MakeGrapplerFunctionItem takes arguments that determine the sizes of inputs and outputs. If the inputs given are greater than or equal to the sizes of the outputs, an out-of-bounds memory read or a crash is triggered. python import tensorflow as tf @tf.function def test: tf.ra...

PT-2026-59937

Impact The function MakeGrapplerFunctionItem takes arguments that determine the sizes of inputs and outputs. If the inputs given are greater than or equal to the sizes of the outputs, an out-of-bounds memory read or a crash is triggered. python import tensorflow as tf @tf.function def test: tf.ra...

PT-2026-59907

Impact TFversion 2.11.0 //tensorflow/core/ops/array ops.cc:1067 const Tensor hypothesis shape t = c-input tensor2; std::vector dimshypothesis shape t-NumElements - 1; for int i = 0; i MakeDimstd::maxh valuesi, t valuesi; if hypothesis shape t is empty, hypothesis shape t-NumElements - 1 will be...

PT-2026-59833

Impact When Unbatch receives a nonscalar input id, it gives a CHECK fail that can trigger a denial of service attack. python import tensorflow as tf import numpy as np arg 0=tf.constantvalue=np.random.randomsize=3, 3, 1, dtype=tf.float64 arg 1=tf.constantvalue=np.random.randint0,100,size=3, 3, 1,...

PT-2026-59883

Impact When tf.raw ops.ResizeNearestNeighborGrad is given a large size input, it overflows. import tensorflow as tf align corners = True half pixel centers = False grads = tf.constant1, shape=1,8,16,3, dtype=tf.float16 size = tf.constant1879048192,1879048192, shape=2, dtype=tf.int32 tf.raw...

PT-2026-59797

Impact When mlir::tfg::ConvertGenericFunctionToFunctionDef is given empty function attributes, it gives a null dereference. cpp // Import the function attributes with a tf. prefix to match the current // infrastructure expectations. for const auto& namedAttr : func.attr const std::string& name =...