Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Buy Us a Coffee

CVE-2020-15213— Denial of service in tensorflow-lite

Quick assessment

Affected

tensorflow tensorflow

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Google TensorFlow是美国谷歌（Google）公司的一套用于机器学习的端到端开源平台。 TensorFlow Lite 2.2.1之前版本，2.3.1版本中存在安全漏洞，该漏洞允许攻击者通过一定手段获取到很大内存，导致内存不足触发拒绝服务。

CVSS 4.0 · Medium EPSS 0.76% · P56 Updated Feb 24, 2026

Possible ATT&CK Techniques 1 AI

T1496 · Resource Hijacking

Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2020-15213

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

Denial of service in tensorflow-lite

Source: CVE Program / CVE List V5

Vulnerability Description

In TensorFlow Lite before versions 2.2.1 and 2.3.1, models using segment sum can trigger a denial of service by causing an out of memory allocation in the implementation of segment sum. Since code uses the last element of the tensor holding them to determine the dimensionality of output tensor, attackers can use a very large value to trigger a large allocation. The issue is patched in commit 204945b19e44b57906c9344c0d00120eeeae178a and is released in TensorFlow versions 2.2.1, or 2.3.1. A potential workaround would be to add a custom `Verifier` to limit the maximum value in the segment ids tensor. This only handles the case when the segment ids are stored statically in the model, but a similar validation could be done if the segment ids are generated at runtime, between inference steps. However, if the segment ids are generated as outputs of a tensor during inference steps, then there are no possible workaround and users are advised to upgrade to patched code.

Source: CVE Program / CVE List V5

CVSS Information

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:L

Source: CVE Program / CVE List V5

Vulnerability Type

内存缓冲区边界内操作的限制不恰当

Source: CVE Program / CVE List V5

Vulnerability Title

Google TensorFlow 安全漏洞

Source: CNNVD (China National Vulnerability Database)

Vulnerability Description

Source: CNNVD (China National Vulnerability Database)

CVSS Information

N/A

Source: CNNVD (China National Vulnerability Database)

Vulnerability Type

N/A

Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
tensorflow	tensorflow	= 2.2.0	-

II. Public POCs for CVE-2020-15213

#	POC Description	Source Link	Shenlong Link

AI-Generated POC Premium

No public POC found.

III. Intelligence Information for CVE-2020-15213

请登录查看更多情报信息。

Patches & Fixes for CVE-2020-15213 (1)

https://github.com/tensorflow/tensorflow/commit/204945b19e44b57906c9344c0d00120eeeae178a x_refsource_MISC

Other References for CVE-2020-15213 (1)

https://github.com/tensorflow/tensorflow/releases/tag/v2.3.1 x_refsource_MISC

https://www.cve.org/CVERecord?id=CVE-2020-15213

Same Patch Batch · tensorflow · 2020-09-25 · 25 CVEs total

CVE-2020-15202	9.0 CRITICAL	Integer truncation in Shard API usage
CVE-2020-15205	9.0 CRITICAL	Data leak in Tensorflow
CVE-2020-15206	9.0 CRITICAL	Denial of Service in Tensorflow
CVE-2020-15207	8.7 HIGH	Segfault and data corruption in tensorflow-lite
CVE-2020-15196	8.5 HIGH	Heap buffer overflow in Tensorflow
CVE-2020-15195	8.5 HIGH	Heap buffer overflow in Tensorflow
CVE-2020-15212	8.1 HIGH	Out of bounds access in tensorflow-lite
CVE-2020-15214	8.1 HIGH	Out of bounds write in tensorflow-lite
CVE-2020-15203	7.5 HIGH	Denial of Service in Tensorflow
CVE-2020-15208	7.4 HIGH	Data corruption in tensorflow-lite
CVE-2020-15193	7.1 HIGH	Memory corruption in Tensorflow
CVE-2020-15210	6.5 MEDIUM	Segmentation fault in tensorflow-lite
CVE-2020-15197	6.3 MEDIUM	Denial of Service in Tensorflow
CVE-2020-15209	5.9 MEDIUM	Null pointer dereference in tensorflow-lite
CVE-2020-15199	5.9 MEDIUM	Denial of Service in Tensorflow
CVE-2020-15200	5.9 MEDIUM	Segfault in Tensorflow
CVE-2020-15198	5.4 MEDIUM	Heap buffer overflow in Tensorflow
CVE-2020-15190	5.3 MEDIUM	Segfault in Tensorflow
CVE-2020-15191	5.3 MEDIUM	Undefined behavior in Tensorflow
CVE-2020-15194	5.3 MEDIUM	Denial of Service in Tensorflow

Showing top 20 of 25 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: tensorflow

Same vendor: tensorflow

Same weakness: CWE-119