CVE-2021-41200

CVE-2021-41200 concerns TensorFlow’s tf.summary.create_file_writer: when called with non-scalar arguments, affected builds can crash due to a CHECK failure. The provided documents specify the issue in TensorFlow’s open-source code path and confirm a fix in TensorFlow 2.7.0, with cherry-picks to o...

CVE-2021-41204

CVE-2021-41204 concerns TensorFlow. In affected builds, during Grappler optimizer constant folding, a deep copy of a resource tensor may be attempted, causing a segfault because such tensors should not change. The issue is addressed with a fix in TensorFlow 2.7.0, and a cherry-pick was applied to...

CVE-2021-41219

TensorFlow SparseMatMul contains undefined behavior by binding a reference to nullptr when either input dimension is 0 or less, risking heap OOB writes. The issue affects TensorFlow releases prior to the fix and is documented across multiple advisories (OSV, GHSA) with specific commit e6cf28c7 an...

CVE-2021-41225

CVE-2021-41225 affects TensorFlow’s Grappler optimizer: if train_nodes lacks a Dequeue node, dequeue_node remains uninitialized due to an uninitialized variable in the Grappler code. The documented fix is included in TensorFlow 2.7.0, with cherry-picks for 2.6.1, 2.5.2, and 2.4.4 (still in suppor...

CVE-2022-35937

TensorFlow Lite GatherNd contains an out-of-bounds read when input indices can exceed output sizes. The issue is fixed via patch 595a65a3e224a0362d7e68c2213acfc2b499a196, with the fix planned for TensorFlow 2.10.0 and cherry-picks for 2.9.1, 2.8.1, and 2.7.2 (all in the supported range). There ar...

CVE-2022-35985

CVE-2022-35985: In TensorFlow, LRNGrad raises a denial-of-service risk when output_image is not 4-D, triggering a CHECK failure. The issue was patched in commit bd90b3efab4ec958b228cd7cfe9125be1c0cf255 and the fix is planned for TensorFlow 2.10.0, with cherry-picks on TF 2.9.1, 2.8.1, and 2.7.2 (...

CVE-2022-41884

CVE-2022-41884 affects TensorFlow. A numpy array has a shape where one element is zero and the others sum to a large number, triggering an error. The issue has been fixed in commit 2b56169c16e375c521a3bc8ea658811cc0793784 and will be included in TensorFlow 2.11; the fix will also be cherry-picked...

CVE-2022-41886

CVE-2022-41886 affects TensorFlow. The vulnerability occurs in the operator tf.raw_ops.ImageProjectiveTransformV2 when it outputs a large shape, causing an overflow. A patch is in the GitHub commit 8faa6ea692985dbe6ce10e1a3168e0bd60a723ba and the fix will be included in TensorFlow 2.11; TensorFlo...

CVE-2021-29534

TensorFlow vulnerability CVE-2021-29534 concerns a CHECK-fail in tf.raw_ops.SparseConcat caused by using shapes[0] to define the output shape, leading to a denial of service via overflow in TensorShape initialization. Affected behavior occurs when shape dimensions are overflowed during InitDims/A...

CVE-2021-29553

TensorFlow vulnerability CVE-2021-29553 involves a heap-based out-of-bounds read in tf.raw_ops.QuantizeAndDequantizeV3 caused by not validating the user-supplied axis before indexing the input. Affected TensorFlow versions are in the 2.x range, with a fix planned for TensorFlow 2.5.0 and cherry-p...

CVE-2021-29607

CVE-2021-29607 is tied to TensorFlow’s SparseAdd validation. The issue arises from incomplete validation of sparse tensor inputs (not checking emptiness or second-dimension_matches size), enabling potential undefined behavior such as null pointer dereferences and heap-out-of-bounds writes. The vu...

CVE-2021-37664

TensorFlow vulnerability CVE-2021-37664: a heap out-of-bounds read can be triggered in BoostedTreesSparseCalculateBestFeatureSplit by sending illegal values to stats_summary_indices. The issue stems from insufficient validation in the boosted trees code path. A patch was committed (e84c9753...) a...

CVE-2021-37676

TensorFlow CVE-2021-37676 involves a vulnerability in SparseFillEmptyRows where the shape-inference code can bind a null pointer, causing undefined behavior. The issue has been patched in a GitHub commit and the fix is scheduled for TensorFlow 2.6.0, with cherry-picks to 2.5.1, 2.4.3, and 2.3.4 (...

CVE-2021-41202

The CVE-2021-41202 family describes an overflow in TensorFlow's tf.range kernel caused by a conditional int64 = condition ? int64 : double, where implicit C++ casting to double truncates the result. Affected are TF releases in the 2.4.x–2.7.x range (including 2.7.0 and cherry-picks to 2.6.1, 2.5....

CVE-2021-41207

TensorFlow ParallelConcat vulnerability (CVE-2021-41207) arises from insufficient input validation in the ParallelConcat implementation, which can lead to a division by zero in affected TensorFlow versions. The issue affects multiple releases and is slated to be fixed in TensorFlow 2.7.0; Sony ch...

CVE-2022-21733

TensorFlow StringNGrams vulnerability CVE-2022-21733 causes memory exhaustion (OOM) due to missing validation of pad_width, which can result in a negative ngram_width used during output allocation. Affects TensorFlow/StringNGrams path in multiple TF versions; remediation is to upgrade to TensorFl...

CVE-2022-23573

TensorFlow's AssignOp implementation can copy uninitialized data to a new tensor, causing undefined behavior. This CVE (CVE-2022-23573) affects the TensorFlow core kernel related to AssignOp. The issue arises because the left-hand side is initialized, but the right-hand side is not checked for in...

CVE-2022-23594

TensorFlow MLIR/TFG GraphDef handling flaw: if a SavedModel is on disk with altered format, conversion to the MLIR-based IR can crash the Python interpreter and may enable heap out-of-bounds reads. Affected scope includes the MLIR import path and associated GraphDef assumptions; exploitation deta...

CVE-2022-36001

TensorFlow DrawBoundingBoxes input validation issue (CVE-2022-36001): when boxes is not dtype float, a CHECK failure can trigger a denial of service. Patch is in GitHub commit da0d65cdc1270038e72157ba35bf74b85d9bda11; fix will be in TensorFlow 2.10.0, with cherry-picks to 2.9.1, 2.8.1 and 2.7.2. ...

CVE-2020-15197

TensorFlow prior to 2.3.1 is affected by CVE-2020-15197 due to a validation gap in SparseCountSparseOutput: the indices tensor is not checked to be rank 2, though code treats it as a matrix. This can allow crafted input sparse tensors to cause a CHECK failure and crash, enabling denial of service...

CVE-2021-29595

TensorFlow/TFLite: DepthToSpace division-by-zero in the DepthToSpace TFLite operator. A model with block_size = 0 triggers a fault in the calculation of output_channels, per the cited code path. A fix is planned for TensorFlow 2.5.0, with cherry-picks to 2.4.2, 2.3.3, 2.2.3, and 2.1.4 (still in s...

CVE-2021-37652

TensorFlow Bug: BoostedTreesCreateEnsemble uses a reference-counted resource that was refactored to a smart pointer; when initialization fails, a later scope exit frees the resource even if its refcount is 0, causing a use-after-free. A patch (commit 5ecec9c6fbdbc6be03295685190a45e7eee726ab) fixe...

CVE-2021-37654

CVE-2021-37654 (TensorFlow) is tied to a Heap OOB read and a CHECK-fail in tf.raw_ops.ResourceGather when batch_dims can exceed the input rank. The issue stems from not validating batch_dims, causing out-of-bounds reads via multiple loops over tensor dimensions. A patch was committed (bc9c546ce70...

CVE-2021-37646

CVE-2021-37646 affects TensorFlow: the StringNGrams implementation can overflow when converting a negative, signed ngram_width to an unsigned size during a reserve call, enabling a potential denial-of-service condition. The root cause is a signed-to-unsigned conversion in TF’s string buffer alloc...

CVE-2021-37647

CVE-2021-37647 describes a null pointer dereference in TensorFlow’s tf.raw_ops.SparseTensorSliceDataset when creating an empty sparse tensor with mismatched indices/values. The description specifies that validation exists but can dereference a null pointer if indices are empty, leading to a crash...

CVE-2021-37651

TensorFlow: The FractionalAvgPoolGrad path has a heap-based buffer overflow when handling empty inputs, caused by not validating that the input tensor is non-empty. The implementation constructs an empty EigenDoubleMatrixMap and accesses out-of-bounds buffers. A patch was committed (0f931751fb20f...

CVE-2021-37660

CVE-2021-37660 describes a division-by-zero flaw in TensorFlow’s inplace operations due to a logic error in inplace_ops.cc. The faulty condition uses || instead of &&, allowing a floating-point exception when crafted inputs are provided. The issue has been patched in the GitHub commit e86605c0a33...

CVE-2021-37683

TensorFlow (TFLite division) vulnerability (CVE-2021-37683): In affected builds, division in TFLite can produce a division-by-zero error because there is no check that the divisor tensor contains zero. The issue was addressed in commit 1e206baedf8bef0334cca3eb92bab134ef525a28 and the fix is plann...

CVE-2021-37637

CVE-2021-37637 is a TensorFlow null pointer dereference in tf.raw_ops.CompressElement triggered by invalid input. The issue occurred when code accessed a buffer size before validating the buffer, and has been patched in GitHub commit 5dc7f6981fdaf74c8c5be41f393df705841fb7c5. The fix will be in Te...

CVE-2021-37656

TensorFlow CVE-2021-37656 affects RaggedTensorToSparse, caused by incomplete validation of splits values which can bind a reference to a null pointer, leading to undefined behavior. The issue is addressed by a patch in the cited commit and will be included in TensorFlow 2.6.0, with backports to 2...

CVE-2021-41195

TensorFlow CVE-2021-41195 affects tf.math.segment_* implementations; large segment_ids can trigger a CHECK failure and abort due to int64 overflow when computing output shapes. Vulnerable CPU/GPU paths use AddDim, with AddDimWithStatus needed to prevent overflow. The fix is planned for TensorFlow...

CVE-2021-41226

TensorFlow SparseBinCount is affected by a heap out-of-bounds (OOB) access due to missing validation between the values and the sparse output shape. Reports in CVE-2021-41226 and related advisories identify this as the root cause in affected TF versions. The fix is planned for TensorFlow 2.7.0, w...

CVE-2022-36000

CVE-2022-36000 describes a null pointer dereference in TensorFlow when mlir::tfg::ConvertGenericFunctionToFunctionDef is given empty function attributes. Affected TF versions include 2.7.2, 2.8.1, 2.9.1 (and beyond) within the supported range; the issue has been patched in commit aed36912609fc072...

CVE-2022-36005

TensorFlow vulnerability CVE-2022-36005: a CHECK failure in tf.quantization.fake_quant_with_min_max_vars_gradient when min or max inputs are non-scalar can trigger a denial of service. A patch is committed (f3cf67ac5705f4f04721d15e485e192bb319feed) and will be included in TensorFlow 2.10.0; the f...

CVE-2022-41883

CVE-2022-41883 affects TensorFlow. When ops with specified input sizes receive a differing number of inputs, the executor can crash due to an input-size mismatch. The issue has been patched in GitHub commit f5381e0e10b5a61344109c1b7c174c68110f7629 and will be included in TensorFlow 2.11; it will ...

CVE-2023-33976

CVE-2023-33976: TensorFlow is vulnerable to a denial-of-service crash due to a segfault in array_ops.upper_bound when not given a rank-2 tensor. The documented root cause is a segfault in array_ops.upper_bound; impact is a crash that can be triggered remotely as described in the advisory. The pub...

CVE-2018-8825

CVE-2018-8825 affects Google TensorFlow 1.7 and earlier, with a buffer overflow that can lead to local code execution. Multiple connected advisories corroborate a buffer‑overflow issue related to TensorFlow components (e.g., TOCO handling of TFLite graphs in the same family). The provided documen...

CVE-2020-15199

Summary: TensorFlow prior to 2.3.1 contains a bug in RaggedCountSparseOutput where input ragged tensors are not validated for proper splits; an empty or single-element splits can trigger a SIGABRT due to an initialization bound. Root cause: lack of validation in RaggedCountSparseOutput when formi...

CVE-2020-15201

CVE-2020-15201 : TensorFlow before 2.3.1 contains a bounds-checking flaw in RaggedCountSparseOutput, where input ragged-tensor validation is missing. Specifically, values in the splits tensor may not form a valid partitioning of values, risking a heap-based buffer overflow if split_values does no...

CVE-2021-37636

CVE-2021-37636 concerns TensorFlow with a vulnerability in tf.raw_ops.SparseDenseCwiseDiv where division by zero can occur due to how a shared binary-ops class handles this case. The issue affects affected TensorFlow versions and has been addressed by patching the underlying code in a GitHub comm...

CVE-2021-37653

TensorFlow Cortex: CVE-2021-37653 affects TensorFlow’s tf.raw_ops.ResourceGather. The issue stems from computing batch_size and dividing by it without validating 0, causing a local crash (denial of service). A patch exists in GitHub commit ac117ee8a8ea57b73d34665cdf00ef3303bc0b11 and should be in...

CVE-2022-35965

TensorFlow (CVE-2022-35965) is affected by a NULL pointer dereference in LowerBound/UpperBound when given an empty sorted_inputs, causing a segmentation fault that can lead to a denial of service. The issue affects TensorFlow releases in the affected range and has been patched in commit bce3717ea...

CVE-2022-35966

CVE-2022-35966 affects TensorFlow. When QuantizedAvgPool is given min_input or max_input tensors of a nonzero rank, it can cause a segfault that enables a denial of service. The issue has been patched in GitHub commit 7cdf9d4d2083b739ec81cfdace546b0c99f50622 and the fix will be included in Tensor...

CVE-2022-35972

TensorFlow CVE-2022-35972 concerns a segfault in QuantizedBiasAdd when given min_input, max_input, min_bias, max_bias with a nonzero rank, leading to a denial of service. A patch was applied in GitHub commit 785d67a78a1d533759fcd2f5e8d6ef778de849e0, with the fix slated for TensorFlow 2.10.0. The ...

CVE-2022-36012

TensorFlow vulnerability CVE-2022-36012: when mlir::tfg::ConvertGenericFunctionToFunctionDef processes empty function attributes, TensorFlow crashes. A patch (commit ad069af92392efee1418c48ff561fd3070a03d7b) fixes the issue and will be included in TensorFlow 2.10.0, with cherry-picks to 2.9.1, 2....

CVE-2021-37688

CVE-2021-37688 is a TensorFlow/TFLite vulnerability describing a null pointer dereference in TFLite kernels (implemented in optimized_ops.h) that can crash the process and cause denial of service when processing a crafted TFLite model. The issue is a local condition, with the vulnerable path unco...

CVE-2021-41217

CVE-2021-41217 concerns TensorFlow: a null pointer dereference in the control-flow graph construction when paired nodes like Enter/Exit are not properly ordered. The vulnerability causes a crash due to dereferencing a null parent in the pairing logic. A fix is included in TensorFlow 2.7.0, with c...

CVE-2022-35969

TensorFlow CVE-2022-35969 stems from Conv2DBackpropInput requiring input_sizes to be 4-dimensional; non-conforming input can trigger a CHECK failure that allows denial of service. A fix was committed (50156d547b9a1da0144d7babe665cf690305b33c) and will be included in TensorFlow 2.10.0, with cherry...

CVE-2018-7576

CVE-2018-7576 relates to Google TensorFlow, affecting 1.6.x and earlier due to a null pointer dereference. The available descriptions indicate the exploitation is context‑dependent. The connected documents corroborate the TensorFlow association but do not provide concrete remediation details (pat...

CVE-2020-15196

CVE-2020-15196 affects TensorFlow 2.3.0: SparseCountSparseOutput and RaggedCountSparseOutput do not validate that the weights tensor has the same shape as the data, allowing reads beyond the weights buffer when fewer weights are provided. This heap-based overflow is mitigated in TensorFlow 2.3.1 ...