Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

tensorflow — Vulnerabilities & Security Advisories 404

All 404 CVE vulnerabilities found in tensorflow, with AI-generated Chinese analysis, references, and POCs.

This page aggregates security vulnerability data for the TensorFlow open-source machine learning framework, focusing on common weakness enumerations and associated tags managed by the Google TensorFlow team. The collection encompasses a wide spectrum of defects ranging from buffer overflows and out-of-bounds reads to logic errors and denial-of-service conditions, covering reported incidents from early framework releases through current stable versions to provide a comprehensive historical view. Readers can utilize this resource to track vendor advisories from Google and the broader community, understand the prevalence and impact of specific weakness classes within deep learning libraries, and look up the complete vulnerability history of the TensorFlow product to assess risk exposure and patch urgency. By consolidating these disparate security reports, the page serves as a central reference for developers, security analysts, and researchers who need to evaluate the integrity of their machine learning pipelines. Understanding these vulnerabilities is critical for maintaining robust deployment environments, as TensorFlow is widely adopted across industries for training and inference tasks. This aggregation allows stakeholders to quickly identify patterns in defect types, verify whether specific components have been affected in past updates, and make informed decisions regarding system hardening and dependency management. The information presented here is derived from public advisory databases and official security bulletins, ensuring accuracy and timeliness for those monitoring the ecosystem’s security posture.

Vendor: tensorflow

CVE ID Title CVSS Severity Published
CVE-2026-2492 TensorFlow HDF5 Library Uncontrolled Search Path Element Local Privilege Escalation Vulnerability CWE-427 7.8AI High AI 2026-02-20
CVE-2025-0649 Stack Exhaustion In Tensorflow Serving CWE-121 7.5AI High AI 2025-05-06
CVE-2023-33976 TensorFlow segfault in array_ops.upper_bound CWE-190 7.5 High 2024-07-30
CVE-2023-30767 Intel Optimization for TensorFlow 安全漏洞 5.5 Medium 2024-02-14
CVE-2023-25661 Denial of Service in TensorFlow CWE-20 6.5 Medium 2023-03-27
CVE-2023-25660 TensorFlow vulnerable to seg fault in `tf.raw_ops.Print` CWE-476 7.5 High 2023-03-24
CVE-2023-25659 TensorFlow vulnerable to Out-of-Bounds Read in DynamicStitch CWE-125 7.5 High 2023-03-24
CVE-2023-25658 TensorFlow vulnerable to Out-of-Bounds Read in GRUBlockCellGrad CWE-125 7.5 High 2023-03-24
CVE-2023-25662 TensorFlow vulnerable to integer overflow in EditDistance CWE-190 7.5 High 2023-03-24
CVE-2023-25663 TensorFlow has Null Pointer Error in TensorArrayConcatV2 CWE-476 7.5 High 2023-03-24
CVE-2023-25664 TensorFlow vulnerable to Heap Buffer Overflow in AvgPoolGrad CWE-120 7.5 High 2023-03-24
CVE-2023-25667 TensorFlow vulnerable to segfault when opening multiframe gif CWE-190 6.5 Medium 2023-03-24
CVE-2023-25666 TensorFlow has Floating Point Exception in AudioSpectrogram CWE-697 7.5 High 2023-03-24
CVE-2023-25665 TensorFlow has Null Pointer Error in SparseSparseMaximum CWE-476 7.5 High 2023-03-24
CVE-2023-25668 TensorFlow vulnerable to heap out-of-buffer read in the QuantizeAndDequantize operation CWE-122 9.8 Critical 2023-03-24
CVE-2023-25669 TensorFlow has Floating Point Exception in AvgPoolGrad with XLA CWE-697 7.5 High 2023-03-24
CVE-2023-25670 TensorFlow has Null Pointer Error in QuantizedMatMulWithBiasAndDequantize CWE-476 7.5 High 2023-03-24
CVE-2023-25671 TensorFlow has segmentation fault in tfg-translate CWE-787 7.5 High 2023-03-24
CVE-2023-25672 TensorFlow has Null Pointer Error in LookupTableImportV2 CWE-476 7.5 High 2023-03-24
CVE-2023-25673 TensorFlow has Floating Point Exception in TensorListSplit with XLA CWE-697 7.5 High 2023-03-24
CVE-2023-25674 TensorFlow has Null Pointer Error in RandomShuffle with XLA enable CWE-476 7.5 High 2023-03-24
CVE-2023-25675 TensorFlow has Segfault in Bincount with XLA CWE-697 7.5 High 2023-03-24
CVE-2023-25676 TensorFlow has null dereference on ParallelConcat with XLA CWE-476 7.5 High 2023-03-24
CVE-2023-25801 TensorFlow has double free in Fractional(Max/Avg)Pool CWE-415 8.0 High 2023-03-24
CVE-2023-27579 TensorFlow has Floating Point Exception in TFLite in conv kernel CWE-697 7.5 High 2023-03-24
CVE-2022-41910 Heap out of bounds read in `QuantizeAndDequantizeV2` in Tensorflow CWE-125 4.8 Medium 2022-12-06
CVE-2022-41902 Out of bounds write in grappler in Tensorflow CWE-787 7.1 High 2022-12-06
CVE-2022-41890 `CHECK` fail in `BCast` overflow in Tensorflow CWE-704 4.8 Medium 2022-11-18
CVE-2022-41891 Segfault in `tf.raw_ops.TensorListConcat` in Tensorflow CWE-20 4.8 Medium 2022-11-18
CVE-2022-41889 Segfault via invalid attributes in `pywrap_tfe_src.cc` in Tensorflow CWE-476 5.5 Medium 2022-11-18

All 404 known CVE vulnerabilities affecting tensorflow with full Chinese analysis, references, and POCs where available.