Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

tensorflow — Vulnerabilities & Security Advisories 404

All 404 CVE vulnerabilities found in tensorflow, with AI-generated Chinese analysis, references, and POCs.

This page aggregates security vulnerability data for the TensorFlow open-source machine learning framework, focusing on common weakness enumerations and associated tags managed by the Google TensorFlow team. The collection encompasses a wide spectrum of defects ranging from buffer overflows and out-of-bounds reads to logic errors and denial-of-service conditions, covering reported incidents from early framework releases through current stable versions to provide a comprehensive historical view. Readers can utilize this resource to track vendor advisories from Google and the broader community, understand the prevalence and impact of specific weakness classes within deep learning libraries, and look up the complete vulnerability history of the TensorFlow product to assess risk exposure and patch urgency. By consolidating these disparate security reports, the page serves as a central reference for developers, security analysts, and researchers who need to evaluate the integrity of their machine learning pipelines. Understanding these vulnerabilities is critical for maintaining robust deployment environments, as TensorFlow is widely adopted across industries for training and inference tasks. This aggregation allows stakeholders to quickly identify patterns in defect types, verify whether specific components have been affected in past updates, and make informed decisions regarding system hardening and dependency management. The information presented here is derived from public advisory databases and official security bulletins, ensuring accuracy and timeliness for those monitoring the ecosystem’s security posture.

Vendor: tensorflow

CVE ID Title CVSS Severity Published
CVE-2021-41207 Division by zero in `ParallelConcat` CWE-369 5.5 Medium 2021-11-05
CVE-2021-41202 Overflow/crash in `tf.range` CWE-681 5.5 Medium 2021-11-05
CVE-2021-41209 FPE in convolutions with zero size filters CWE-369 5.5 Medium 2021-11-05
CVE-2021-41203 Missing validation during checkpoint loading CWE-345 7.8 High 2021-11-05
CVE-2021-41215 Null pointer exception in `DeserializeSparse` CWE-476 5.5 Medium 2021-11-05
CVE-2021-41217 Null pointer exception when `Exit` node is not preceded by `Enter` op CWE-476 5.5 Medium 2021-11-05
CVE-2021-41219 Undefined behavior via `nullptr` reference binding in sparse matrix multiplication CWE-824 7.8 High 2021-11-05
CVE-2021-41214 Reference binding to `nullptr` in `tf.ragged.cross` CWE-824 7.8 High 2021-11-05
CVE-2021-41204 Segfault while copying constant resource tensor CWE-824 5.5 Medium 2021-11-05
CVE-2021-41226 Heap OOB read in `SparseBinCount` CWE-125 7.1 High 2021-11-05
CVE-2021-41223 Heap OOB read in `FusedBatchNorm` kernels CWE-125 7.1 High 2021-11-05
CVE-2021-41224 `SparseFillEmptyRows` heap OOB read CWE-125 7.1 High 2021-11-05
CVE-2021-41212 Heap OOB read in `tf.ragged.cross` CWE-125 7.1 High 2021-11-05
CVE-2021-41211 Heap OOB read in shape inference for `QuantizeV2` CWE-125 7.1 High 2021-11-05
CVE-2021-41205 Heap OOB read in all `tf.raw_ops.QuantizeAndDequantizeV*` ops CWE-125 7.1 High 2021-11-05
CVE-2021-41210 Heap OOB read in `tf.raw_ops.SparseCountSparseOutput` CWE-125 7.1 High 2021-11-05
CVE-2021-41201 Unitialized access in `EinsumHelper::ParseEquation` CWE-824 7.8 High 2021-11-05
CVE-2021-41200 Incomplete validation in `tf.summary.create_file_writer` CWE-617 5.5 Medium 2021-11-05
CVE-2021-41197 Crashes due to overflow and `CHECK`-fail in ops with large tensor shapes CWE-190 5.5 Medium 2021-11-05
CVE-2021-41198 Overflow/crash in `tf.tile` when tiling tensor is large CWE-190 5.5 Medium 2021-11-05
CVE-2021-41199 Overflow/crash in `tf.image.resize` when size is large CWE-190 5.5 Medium 2021-11-05
CVE-2021-41196 Crash in `max_pool3d` when size argument is 0 or negative CWE-191 5.5 Medium 2021-11-05
CVE-2021-41195 Crash in `tf.math.segment_*` operations CWE-190 5.5 Medium 2021-11-05
CVE-2021-37690 Use after free and segfault in shape inference functions in TensorFlow CWE-416 6.6 Medium 2021-08-12
CVE-2021-37678 Arbitrary code execution due to YAML deserialization CWE-502 9.3 Critical 2021-08-12
CVE-2021-37692 Segfault on strings tensors with mistmatched dimensions in TensorFlow CWE-20 5.5 Medium 2021-08-12
CVE-2021-37669 Crash in NMS ops caused by integer conversion to unsigned in TensorFlow CWE-681 5.5 Medium 2021-08-12
CVE-2021-37673 `CHECK`-fail in `MapStage` in TensorFlow CWE-20 5.5 Medium 2021-08-12
CVE-2021-37663 Incomplete validation in `QuantizeV2` in TensorFlow CWE-20 7.8 High 2021-08-12
CVE-2021-37682 Use of unitialized value in TensorFlow Lite CWE-908 4.4 Medium 2021-08-12

All 404 known CVE vulnerabilities affecting tensorflow with full Chinese analysis, references, and POCs where available.