Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

tensorflow — Vulnerabilities & Security Advisories 404

All 404 CVE vulnerabilities found in tensorflow, with AI-generated Chinese analysis, references, and POCs.

This page aggregates security vulnerability data for the TensorFlow open-source machine learning framework, focusing on common weakness enumerations and associated tags managed by the Google TensorFlow team. The collection encompasses a wide spectrum of defects ranging from buffer overflows and out-of-bounds reads to logic errors and denial-of-service conditions, covering reported incidents from early framework releases through current stable versions to provide a comprehensive historical view. Readers can utilize this resource to track vendor advisories from Google and the broader community, understand the prevalence and impact of specific weakness classes within deep learning libraries, and look up the complete vulnerability history of the TensorFlow product to assess risk exposure and patch urgency. By consolidating these disparate security reports, the page serves as a central reference for developers, security analysts, and researchers who need to evaluate the integrity of their machine learning pipelines. Understanding these vulnerabilities is critical for maintaining robust deployment environments, as TensorFlow is widely adopted across industries for training and inference tasks. This aggregation allows stakeholders to quickly identify patterns in defect types, verify whether specific components have been affected in past updates, and make informed decisions regarding system hardening and dependency management. The information presented here is derived from public advisory databases and official security bulletins, ensuring accuracy and timeliness for those monitoring the ecosystem’s security posture.

Vendor: tensorflow

CVE ID Title CVSS Severity Published
CVE-2021-37674 Incomplete validation in `MaxPoolGrad` in TensorFlow CWE-20 5.5 Medium 2021-08-12
CVE-2021-37665 Incomplete validation in MKL requantization in TensorFlow CWE-20 7.8 High 2021-08-12
CVE-2021-37677 Missing validation in shape inference for `Dequantize` in TensorFlow CWE-20 5.5 Medium 2021-08-12
CVE-2021-37683 Division by zero in TensorFlow Lite division operations CWE-369 5.5 Medium 2021-08-12
CVE-2021-37684 Division by zero in TensorFlow Lite pooling operations CWE-369 5.5 Medium 2021-08-12
CVE-2021-37668 Division by zero in TensorFlow Lite `tf.raw_ops.UnravelIndex` CWE-369 5.5 Medium 2021-08-12
CVE-2021-37670 Heap OOB in `UpperBound` and `LowerBound` in TensorFlow CWE-125 5.5 Medium 2021-08-12
CVE-2021-37691 Division by zero in LSH in TensorFlow Lite CWE-369 5.5 Medium 2021-08-12
CVE-2021-37679 Heap OOB in nested `tf.map_fn` with `RaggedTensor`s in TensorFlow CWE-125 7.1 High 2021-08-12
CVE-2021-37672 Heap OOB in `SdcaOptimizerV2` in TensorFlow CWE-125 5.5 Medium 2021-08-12
CVE-2021-37687 Heap OOB in TensorFlow Lite's `Gather*` implementations CWE-125 5.5 Medium 2021-08-12
CVE-2021-37685 Heap OOB in TensorFlow Lite CWE-125 5.5 Medium 2021-08-12
CVE-2021-37681 Null pointer exception in TensorFlow Lite CWE-476 7.8 High 2021-08-12
CVE-2021-37689 Null pointer dereference in TensorFlow Lite MLIR optimizations CWE-476 7.8 High 2021-08-12
CVE-2021-37688 Null pointer dereference in TensorFlow Lite CWE-476 7.8 High 2021-08-12
CVE-2021-37686 Infinite loop in TensorFlow Lite CWE-835 5.5 Medium 2021-08-12
CVE-2021-37680 Division by zero in TFLite in TensorFlow CWE-369 5.5 Medium 2021-08-12
CVE-2021-37675 Division by 0 in most convolution operators in TensorFlow CWE-369 5.5 Medium 2021-08-12
CVE-2021-37676 Reference binding to nullptr in shape inference in TensorFlow CWE-824 7.8 High 2021-08-12
CVE-2021-37671 Reference binding to nullptr in map operations in TensorFlow CWE-824 7.8 High 2021-08-12
CVE-2021-37666 Reference binding to nullptr in `RaggedTensorToVariant` in TensorFlow CWE-824 7.8 High 2021-08-12
CVE-2021-37667 Reference binding to nullptr in unicode encoding in TensorFlow CWE-824 7.8 High 2021-08-12
CVE-2021-37648 Incorrect validation of `SaveV2` inputs in TensorFlow CWE-476 7.8 High 2021-08-12
CVE-2021-37652 Use after free in boosted trees creation in TensorFlow CWE-416 7.8 High 2021-08-12
CVE-2021-37646 Bad alloc in `StringNGrams` caused by integer conversion in TensorFlow CWE-681 5.5 Medium 2021-08-12
CVE-2021-37661 Crash caused by integer conversion to unsigned in TensorFlow CWE-681 5.5 Medium 2021-08-12
CVE-2021-37645 Integer overflow due to conversion to unsigned in TensorFlow CWE-681 5.5 Medium 2021-08-12
CVE-2021-37651 Heap buffer overflow in `FractionalAvgPoolGrad` in TensorFlow CWE-125 7.1 High 2021-08-12
CVE-2021-37650 Segfault and heap buffer overflow in `{Experimental,}DatasetToTFRecord` in TensorFlow CWE-120 7.8 High 2021-08-12
CVE-2021-37662 Reference binding to nullptr in boosted trees in TensorFlow CWE-824 7.1 High 2021-08-12

All 404 known CVE vulnerabilities affecting tensorflow with full Chinese analysis, references, and POCs where available.