Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

tensorflow — Vulnerabilities & Security Advisories 404

All 404 CVE vulnerabilities found in tensorflow, with AI-generated Chinese analysis, references, and POCs.

This page aggregates security vulnerability data for the TensorFlow open-source machine learning framework, focusing on common weakness enumerations and associated tags managed by the Google TensorFlow team. The collection encompasses a wide spectrum of defects ranging from buffer overflows and out-of-bounds reads to logic errors and denial-of-service conditions, covering reported incidents from early framework releases through current stable versions to provide a comprehensive historical view. Readers can utilize this resource to track vendor advisories from Google and the broader community, understand the prevalence and impact of specific weakness classes within deep learning libraries, and look up the complete vulnerability history of the TensorFlow product to assess risk exposure and patch urgency. By consolidating these disparate security reports, the page serves as a central reference for developers, security analysts, and researchers who need to evaluate the integrity of their machine learning pipelines. Understanding these vulnerabilities is critical for maintaining robust deployment environments, as TensorFlow is widely adopted across industries for training and inference tasks. This aggregation allows stakeholders to quickly identify patterns in defect types, verify whether specific components have been affected in past updates, and make informed decisions regarding system hardening and dependency management. The information presented here is derived from public advisory databases and official security bulletins, ensuring accuracy and timeliness for those monitoring the ecosystem’s security posture.

Vendor: tensorflow

CVE ID Title CVSS Severity Published
CVE-2022-23585 Memory leak in decoding PNG images in Tensorflow CWE-401 4.3 Medium 2022-02-04
CVE-2022-23579 `CHECK`-failures during Grappler's `SafeToRemoveIdentity` in Tensorflow CWE-617 6.5 Medium 2022-02-04
CVE-2022-23580 Abort caused by allocating a vector that is too large in Tensorflow CWE-400 6.5 Medium 2022-02-04
CVE-2022-23581 `CHECK`-failures during Grappler's `IsSimplifiableReshape` in Tensorflow CWE-617 6.5 Medium 2022-02-04
CVE-2022-23575 Integer overflow in Tensorflow CWE-190 6.5 Medium 2022-02-04
CVE-2022-23576 Integer overflow in Tensorflow CWE-190 6.5 Medium 2022-02-04
CVE-2022-23588 `CHECK`-fails due to attempting to build a reference tensor in Tensorflow CWE-617 6.5 Medium 2022-02-04
CVE-2022-23589 Null pointer dereference in Grappler's `IsConstant` in Tensorflow CWE-476 6.5 Medium 2022-02-04
CVE-2022-23586 Multiple `CHECK`-fails in `function.cc` in Tensorflow CWE-617 6.5 Medium 2022-02-04
CVE-2022-23583 `CHECK`-failures in binary ops in Tensorflow CWE-617 6.5 Medium 2022-02-04
CVE-2022-23582 `CHECK`-failures in `TensorByteSize` in Tensorflow CWE-617 6.5 Medium 2022-02-04
CVE-2022-23584 Use after free in `DecodePng` in Tensorflow CWE-416 7.6 High 2022-02-04
CVE-2022-23587 Integer overflow in Tensorflow CWE-190 8.8 High 2022-02-04
CVE-2022-23592 Out of bounds read in Tensorflow CWE-125 8.1 High 2022-02-04
CVE-2022-23595 Null pointer dereference in TensorFlow CWE-476 5.3 Medium 2022-02-04
CVE-2022-23594 Out of bounds read in Tensorflow CWE-125 8.8 High 2022-02-04
CVE-2022-23590 Crash due to erroneous `StatusOr` in Tensorflow CWE-754 5.9 Medium 2022-02-04
CVE-2022-23591 Stack overflow in Tensorflow CWE-400 7.5 High 2022-02-04
CVE-2022-23593 Segfault in `simplifyBroadcast` in Tensorflow CWE-754 5.9 Medium 2022-02-04
CVE-2021-41227 Arbitrary memory read in `ImmutableConst` CWE-125 6.6 Medium 2021-11-05
CVE-2021-41225 A use of uninitialized value vulnerability in Tensorflow CWE-908 5.5 Medium 2021-11-05
CVE-2021-41222 Segfault due to negative splits in `SplitV` CWE-682 5.5 Medium 2021-11-05
CVE-2021-41228 Code injection in `saved_model_cli` CWE-78 7.5 High 2021-11-05
CVE-2021-41220 Use after free in `CollectiveReduceV2` CWE-416 7.8 High 2021-11-05
CVE-2021-41221 Access to invalid memory during shape inference in `Cudnn*` ops CWE-120 7.8 High 2021-11-05
CVE-2021-41216 Heap buffer overflow in `Transpose` CWE-120 5.5 Medium 2021-11-05
CVE-2021-41213 Deadlock in mutually recursive `tf.function` objects CWE-667 5.5 Medium 2021-11-05
CVE-2021-41218 Integer division by 0 in `tf.raw_ops.AllToAll` CWE-369 5.5 Medium 2021-11-05
CVE-2021-41206 Incomplete validation of shapes in multiple TF ops CWE-354 7.0 High 2021-11-05
CVE-2021-41208 Incomplete validation in boosted trees code CWE-476 8.8 High 2021-11-05

All 404 known CVE vulnerabilities affecting tensorflow with full Chinese analysis, references, and POCs where available.