Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

tensorflow — Vulnerabilities & Security Advisories 404

All 404 CVE vulnerabilities found in tensorflow, with AI-generated Chinese analysis, references, and POCs.

This page aggregates security vulnerability data for the TensorFlow open-source machine learning framework, focusing on common weakness enumerations and associated tags managed by the Google TensorFlow team. The collection encompasses a wide spectrum of defects ranging from buffer overflows and out-of-bounds reads to logic errors and denial-of-service conditions, covering reported incidents from early framework releases through current stable versions to provide a comprehensive historical view. Readers can utilize this resource to track vendor advisories from Google and the broader community, understand the prevalence and impact of specific weakness classes within deep learning libraries, and look up the complete vulnerability history of the TensorFlow product to assess risk exposure and patch urgency. By consolidating these disparate security reports, the page serves as a central reference for developers, security analysts, and researchers who need to evaluate the integrity of their machine learning pipelines. Understanding these vulnerabilities is critical for maintaining robust deployment environments, as TensorFlow is widely adopted across industries for training and inference tasks. This aggregation allows stakeholders to quickly identify patterns in defect types, verify whether specific components have been affected in past updates, and make informed decisions regarding system hardening and dependency management. The information presented here is derived from public advisory databases and official security bulletins, ensuring accuracy and timeliness for those monitoring the ecosystem’s security posture.

Vendor: tensorflow

CVE ID Title CVSS Severity Published
CVE-2021-29607 Incomplete validation in `SparseSparseMinimum` CWE-754 5.3 Medium 2021-05-14
CVE-2021-29608 Heap OOB and null pointer dereference in `RaggedTensorToTensor` CWE-131 5.3 Medium 2021-05-14
CVE-2021-29609 Incomplete validation in `SparseAdd` CWE-665 5.3 Medium 2021-05-14
CVE-2021-29610 Invalid validation in `QuantizeAndDequantizeV2` CWE-665 3.6 Low 2021-05-14
CVE-2021-29611 Incomplete validation in `SparseReshape` CWE-665 3.6 Low 2021-05-14
CVE-2021-29612 Heap buffer overflow in `BandedTriangularSolve` CWE-120 3.6 Low 2021-05-14
CVE-2021-29613 Incomplete validation in `tf.raw_ops.CTCLoss` CWE-665 6.3 Medium 2021-05-14
CVE-2021-29614 Interpreter crash from `tf.io.decode_raw` CWE-665 7.1 High 2021-05-14
CVE-2021-29555 Division by 0 in `FusedBatchNorm` CWE-369 2.5 Low 2021-05-14
CVE-2021-29556 Division by 0 in `Reverse` CWE-369 2.5 Low 2021-05-14
CVE-2021-29557 Division by 0 in `SparseMatMul` CWE-369 2.5 Low 2021-05-14
CVE-2021-29558 Heap buffer overflow in `SparseSplit` CWE-787 2.5 Low 2021-05-14
CVE-2021-29559 Heap OOB access in unicode ops CWE-125 2.5 Low 2021-05-14
CVE-2021-29560 Heap buffer overflow in `RaggedTensorToTensor` CWE-125 2.5 Low 2021-05-14
CVE-2021-29561 CHECK-fail in `LoadAndRemapMatrix` CWE-617 2.5 Low 2021-05-14
CVE-2021-29562 CHECK-fail in `tf.raw_ops.IRFFT` CWE-617 2.5 Low 2021-05-14
CVE-2021-29563 CHECK-fail in `tf.raw_ops.RFFT` CWE-617 2.5 Low 2021-05-14
CVE-2021-29564 Null pointer dereference in `EditDistance` CWE-476 2.5 Low 2021-05-14
CVE-2021-29565 Null pointer dereference in `SparseFillEmptyRows` CWE-476 2.5 Low 2021-05-14
CVE-2021-29566 Heap OOB access in `Dilation2DBackpropInput` CWE-787 2.5 Low 2021-05-14
CVE-2021-29567 Lack of validation in `SparseDenseCwiseMul` CWE-617 2.5 Low 2021-05-14
CVE-2021-29568 Reference binding to null in `ParameterizedTruncatedNormal` CWE-824 2.5 Low 2021-05-14
CVE-2021-29569 Heap out of bounds read in `RequantizationRange` CWE-125 2.5 Low 2021-05-14
CVE-2021-29570 Heap out of bounds read in `MaxPoolGradWithArgmax` CWE-125 2.5 Low 2021-05-14
CVE-2021-29571 Memory corruption in `DrawBoundingBoxesV2` CWE-787 4.5 Medium 2021-05-14
CVE-2021-29572 Reference binding to nullptr in `SdcaOptimizer` CWE-476 2.5 Low 2021-05-14
CVE-2021-29573 Division by 0 in `MaxPoolGradWithArgmax` CWE-369 2.5 Low 2021-05-14
CVE-2021-29574 Undefined behavior in `MaxPool3DGradGrad` CWE-476 2.5 Low 2021-05-14
CVE-2021-29575 Overflow/denial of service in `tf.raw_ops.ReverseSequence` CWE-119 2.5 Low 2021-05-14
CVE-2021-29576 Heap buffer overflow in `MaxPool3DGradGrad` CWE-119 2.5 Low 2021-05-14

All 404 known CVE vulnerabilities affecting tensorflow with full Chinese analysis, references, and POCs where available.