Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

tensorflow — Vulnerabilities & Security Advisories 404

All 404 CVE vulnerabilities found in tensorflow, with AI-generated Chinese analysis, references, and POCs.

This page aggregates security vulnerability data for the TensorFlow open-source machine learning framework, focusing on common weakness enumerations and associated tags managed by the Google TensorFlow team. The collection encompasses a wide spectrum of defects ranging from buffer overflows and out-of-bounds reads to logic errors and denial-of-service conditions, covering reported incidents from early framework releases through current stable versions to provide a comprehensive historical view. Readers can utilize this resource to track vendor advisories from Google and the broader community, understand the prevalence and impact of specific weakness classes within deep learning libraries, and look up the complete vulnerability history of the TensorFlow product to assess risk exposure and patch urgency. By consolidating these disparate security reports, the page serves as a central reference for developers, security analysts, and researchers who need to evaluate the integrity of their machine learning pipelines. Understanding these vulnerabilities is critical for maintaining robust deployment environments, as TensorFlow is widely adopted across industries for training and inference tasks. This aggregation allows stakeholders to quickly identify patterns in defect types, verify whether specific components have been affected in past updates, and make informed decisions regarding system hardening and dependency management. The information presented here is derived from public advisory databases and official security bulletins, ensuring accuracy and timeliness for those monitoring the ecosystem’s security posture.

Vendor: tensorflow

CVE ID Title CVSS Severity Published
CVE-2022-35971 `CHECK` fail in `FakeQuantWithMinMaxVars` in TensorFlow CWE-617 5.9 Medium 2022-09-16
CVE-2022-35969 `CHECK` fail in `Conv2DBackpropInput` in TensorFlow CWE-617 5.9 Medium 2022-09-16
CVE-2022-35970 Segfault in `QuantizedInstanceNorm` in TensorFlow CWE-20 5.9 Medium 2022-09-16
CVE-2022-35968 `CHECK` fail in `AvgPoolGrad` in TensorFlow CWE-617 5.9 Medium 2022-09-16
CVE-2022-35966 Segfault in `QuantizedAvgPool` in TensorFlow CWE-20 5.9 Medium 2022-09-16
CVE-2022-35967 Segfault in `QuantizedAdd` in TensorFlow CWE-20 5.9 Medium 2022-09-16
CVE-2022-35964 Segfault in `BlockLSTMGradV2` in TensorFlow CWE-20 5.9 Medium 2022-09-16
CVE-2022-35965 Segfault in `LowerBound` and `UpperBound` in TensorFlow CWE-476 5.9 Medium 2022-09-16
CVE-2022-35963 `CHECK` failures in `FractionalAvgPoolGrad` in TensorFlow CWE-617 5.9 Medium 2022-09-16
CVE-2022-35960 `CHECK` failure in `TensorListReserve` in TensorFlow CWE-617 5.9 Medium 2022-09-16
CVE-2022-35959 `CHECK` failures in `AvgPool3DGrad` in TensorFlow CWE-617 5.9 Medium 2022-09-16
CVE-2022-35952 `CHECK` failures in `UnbatchGradOp` in TensorFlow CWE-617 5.9 Medium 2022-09-16
CVE-2022-35940 Int overflow in `RaggedRangeOp` in Tensoflow CWE-190 5.9 Medium 2022-09-16
CVE-2022-35941 `CHECK` failure in `AvgPoolOp` in Tensorflow CWE-617 5.9 Medium 2022-09-16
CVE-2022-35937 OOB read in `Gather_nd` op in TensorFlow Lite CWE-125 7.0 High 2022-09-16
CVE-2022-35939 Out of bounds write in `scatter_nd` op in TensorFlow Lite CWE-787 7.0 High 2022-09-16
CVE-2022-35935 `CHECK` failure in `SobolSample` via missing validation in TensorFlow CWE-617 5.9 Medium 2022-09-16
CVE-2022-35938 OOB read in `Gather_nd` op in TensorFlow Lite Micro CWE-125 7.0 High 2022-09-16
CVE-2022-35934 `CHECK` failure in tf.reshape in Tensorflow CWE-617 5.9 Medium 2022-09-16
CVE-2022-29216 Code injection in `saved_model_cli` in TensorFlow CWE-94 7.8 High 2022-05-20
CVE-2022-29213 Incomplete validation in signal ops leads to crashes in TensorFlow CWE-20 5.5 Medium 2022-05-20
CVE-2022-29210 Heap buffer overflow due to incorrect hash function in TensorFlow CWE-120 5.5 Medium 2022-05-20
CVE-2022-29209 Type confusion leading to `CHECK`-failure based denial of service in TensorFlow CWE-843 5.5 Medium 2022-05-20
CVE-2022-29211 Segfault in TensorFlow if `tf.histogram_fixed_width` is called with NaN values CWE-20 5.5 Medium 2022-05-20
CVE-2022-29212 Core dump when loading TFLite models with quantization in TensorFlow CWE-20 5.5 Medium 2022-05-20
CVE-2022-29201 Missing validation in `QuantizedConv2D` results in undefined behavior in TensorFlow CWE-20 5.5 Medium 2022-05-20
CVE-2022-29202 Denial of service in TensorFlow due to lack of validation in `tf.ragged.constant` CWE-20 5.5 Medium 2022-05-20
CVE-2022-29203 Integer overflow in `SpaceToBatchND` in TensorFlow CWE-190 5.5 Medium 2022-05-20
CVE-2022-29204 Missing validation causes denial of service in TensorFlow via `Conv3DBackpropFilterV2` CWE-191 5.5 Medium 2022-05-20
CVE-2022-29208 Segfault and Out-of-bounds Write write due to incomplete validation in TensorFlow CWE-787 7.1 High 2022-05-20

All 404 known CVE vulnerabilities affecting tensorflow with full Chinese analysis, references, and POCs where available.