Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

tensorflow — Vulnerabilities & Security Advisories 404

All 404 CVE vulnerabilities found in tensorflow, with AI-generated Chinese analysis, references, and POCs.

This page aggregates security vulnerability data for the TensorFlow open-source machine learning framework, focusing on common weakness enumerations and associated tags managed by the Google TensorFlow team. The collection encompasses a wide spectrum of defects ranging from buffer overflows and out-of-bounds reads to logic errors and denial-of-service conditions, covering reported incidents from early framework releases through current stable versions to provide a comprehensive historical view. Readers can utilize this resource to track vendor advisories from Google and the broader community, understand the prevalence and impact of specific weakness classes within deep learning libraries, and look up the complete vulnerability history of the TensorFlow product to assess risk exposure and patch urgency. By consolidating these disparate security reports, the page serves as a central reference for developers, security analysts, and researchers who need to evaluate the integrity of their machine learning pipelines. Understanding these vulnerabilities is critical for maintaining robust deployment environments, as TensorFlow is widely adopted across industries for training and inference tasks. This aggregation allows stakeholders to quickly identify patterns in defect types, verify whether specific components have been affected in past updates, and make informed decisions regarding system hardening and dependency management. The information presented here is derived from public advisory databases and official security bulletins, ensuring accuracy and timeliness for those monitoring the ecosystem’s security posture.

Vendor: tensorflow

CVE ID Title CVSS Severity Published
CVE-2022-29205 Segfault due to missing support for quantized types in TensorFlow CWE-908 5.5 Medium 2022-05-20
CVE-2022-29206 Missing validation results in undefined behavior in `SparseTensorDenseAdd` in TensorFlow CWE-20 5.5 Medium 2022-05-20
CVE-2022-29207 Undefined behavior when users supply invalid resource handles in TensorFlow CWE-20 5.5 Medium 2022-05-20
CVE-2022-29195 Missing validation causes denial of service in TensorFlow via `StagePeek` CWE-20 5.5 Medium 2022-05-20
CVE-2022-29197 Missing validation causes denial of service in TensorFlow via `UnsortedSegmentJoin` CWE-20 5.5 Medium 2022-05-20
CVE-2022-29196 Missing validation causes denial of service in TensorFlow via `Conv3DBackpropFilterV2` CWE-20 5.5 Medium 2022-05-20
CVE-2022-29198 Missing validation causes denial of service in TensorFlow via `SparseTensorToCSRSparseMatrix` CWE-20 5.5 Medium 2022-05-20
CVE-2022-29199 Missing validation causes denial of service in TensorFlow via `LoadAndRemapMatrix` CWE-20 5.5 Medium 2022-05-20
CVE-2022-29200 Missing validation causes denial of service in TensorFlow via `LSTMBlockCell` CWE-20 5.5 Medium 2022-05-20
CVE-2022-29193 Missing validation causes `TensorSummaryV2` in TensorFlow to crash CWE-20 5.5 Medium 2022-05-20
CVE-2022-29194 Missing validation causes denial of service via `DeleteSessionTensor` in TensorFlow CWE-20 5.5 Medium 2022-05-20
CVE-2022-29191 Missing validation causes denial of service via `GetSessionTensor` in TensorFlow CWE-20 5.5 Medium 2022-05-20
CVE-2022-29192 Missing validation crashes `QuantizeAndDequantizeV4Grad` in TensorFlow CWE-20 5.5 Medium 2022-05-20
CVE-2022-23561 Out of bounds write in TFLite CWE-787 8.8 High 2022-02-04
CVE-2022-23557 Division by zero in TFLite CWE-369 6.5 Medium 2022-02-04
CVE-2022-23558 Integer overflow in TFLite array creation CWE-190 7.6 High 2022-02-04
CVE-2022-23570 Null-dereference in Tensorflow CWE-476 6.5 Medium 2022-02-04
CVE-2022-23564 Reachable Assertion in Tensorflow CWE-617 6.5 Medium 2022-02-04
CVE-2022-23565 `CHECK`-failures in Tensorflow CWE-617 6.5 Medium 2022-02-04
CVE-2022-23562 Integer overflow in Tensorflow CWE-190 7.6 High 2022-02-04
CVE-2022-23563 Insecure temporary file in Tensorflow CWE-367 7.1 High 2022-02-04
CVE-2022-23559 Integer overflow in TFLite CWE-190 8.8 High 2022-02-04
CVE-2022-23560 Read and Write outside of bounds in TFLite CWE-125 8.8 High 2022-02-04
CVE-2022-23574 Out of bounds read and write in Tensorflow CWE-125 8.8 High 2022-02-04
CVE-2022-23571 Reachable Assertion in Tensorflow CWE-617 6.5 Medium 2022-02-04
CVE-2022-23566 Out of bounds write in Tensorflow CWE-787 8.8 High 2022-02-04
CVE-2022-23577 Null-dereference in Tensorflow CWE-476 6.5 Medium 2022-02-04
CVE-2022-23578 Memory leak in Tensorflow CWE-401 4.3 Medium 2022-02-04
CVE-2022-23572 Crash when type cannot be specialized in Tensorflow CWE-754 6.5 Medium 2022-02-04
CVE-2022-23573 Uninitialized variable access in Tensorflow CWE-908 7.6 High 2022-02-04

All 404 known CVE vulnerabilities affecting tensorflow with full Chinese analysis, references, and POCs where available.