Vulnerabilities

Google TensorFlow 2.7.0

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

87CVEs

CVE-2022-23579

`CHECK`-failures during Grappler's `SafeToRemoveIdentity` in Tensorflow

Published 2022-02-04 · Modified

6.5EPSS 0.008

CVE-2022-21741

Division by zero in TFLite

Published 2022-02-03 · Modified

6.5EPSS 0.008

CVE-2022-23568

Integer overflows in Tensorflow

Published 2022-02-03 · Modified

6.5EPSS 0.008

CVE-2022-23586

Multiple `CHECK`-fails in `function.cc` in Tensorflow

Published 2022-02-04 · Modified

6.5EPSS 0.008

CVE-2022-21738

Integer overflow leading to crash in Tensorflow

Published 2022-02-03 · Modified

6.5EPSS 0.008

CVE-2022-21729

Overflow and uncaught divide by zero in Tensorflow

Published 2022-02-03 · Modified

6.5EPSS 0.008

CVE-2022-21734

`CHECK`-failures in Tensorflow

Published 2022-02-03 · Modified

6.5EPSS 0.008

CVE-2022-23575

Integer overflow in Tensorflow

Published 2022-02-04 · Modified

6.5EPSS 0.008

CVE-2022-21735

Division by zero in Tensorflow

Published 2022-02-03 · Modified

6.5EPSS 0.008

CVE-2022-23577

Null-dereference in Tensorflow

Published 2022-02-04 · Modified

6.5EPSS 0.008

CVE-2022-21737

Assertion failure based denial of service in Tensorflow

Published 2022-02-03 · Modified

6.5EPSS 0.008

CVE-2022-23582

`CHECK`-failures in `TensorByteSize` in Tensorflow

Published 2022-02-04 · Modified

6.5EPSS 0.008

CVE-2022-21739

Null pointer dereference in TensorFlow

Published 2022-02-03 · Modified

6.5EPSS 0.008

CVE-2022-21725

Division by zero in Tensorflow

Published 2022-02-03 · Modified

6.5EPSS 0.008

CVE-2022-23576

Integer overflow in Tensorflow

Published 2022-02-04 · Modified

6.5EPSS 0.008

CVE-2022-23595

Null pointer dereference in TensorFlow

Published 2022-02-04 · Modified

6.5EPSS 0.008

CVE-2022-21732

Memory exhaustion in Tensorflow

Published 2022-02-03 · Modified

6.5EPSS 0.008

CVE-2022-23557

Division by zero in TFLite

Published 2022-02-04 · Modified

6.5EPSS 0.008

CVE-2022-23571

Reachable Assertion in Tensorflow

Published 2022-02-04 · Modified

6.5EPSS 0.005

CVE-2022-23565

`CHECK`-failures in Tensorflow

Published 2022-02-04 · Modified

6.5EPSS 0.005

CVE-2022-23564

Reachable Assertion in Tensorflow

Published 2022-02-04 · Modified

6.5EPSS 0.005

CVE-2022-23569

`CHECK`-fails when building invalid tensor shapes in Tensorflow

Published 2022-02-03 · Modified

6.5EPSS 0.005

CVE-2022-29209

Type confusion leading to `CHECK`-failure based denial of service in TensorFlow

Published 2022-05-20 · Modified

5.5EPSS 0.004

CVE-2022-29204

Missing validation causes denial of service in TensorFlow via `Conv3DBackpropFilterV2`

Published 2022-05-20 · Analyzed

5.5EPSS 0.003

CVE-2022-29206

Missing validation results in undefined behavior in `SparseTensorDenseAdd` in TensorFlow

Published 2022-05-20 · Modified

5.5EPSS 0.003

CVE-2022-29201

Missing validation in `QuantizedConv2D` results in undefined behavior in TensorFlow

Published 2022-05-20 · Modified

5.5EPSS 0.003

CVE-2022-29203

Integer overflow in `SpaceToBatchND` in TensorFlow

Published 2022-05-20 · Modified

5.5EPSS 0.003

CVE-2022-29193

Missing validation causes `TensorSummaryV2` in TensorFlow to crash

Published 2022-05-20 · Modified

5.5EPSS 0.003

CVE-2022-29195

Missing validation causes denial of service in TensorFlow via `StagePeek`

Published 2022-05-20 · Modified

5.5EPSS 0.003

CVE-2022-29196

Missing validation causes denial of service in TensorFlow via `Conv3DBackpropFilterV2`

Published 2022-05-20 · Modified

5.5EPSS 0.003

CVE-2022-29197

Missing validation causes denial of service in TensorFlow via `UnsortedSegmentJoin`

Published 2022-05-20 · Modified

5.5EPSS 0.003

CVE-2022-29198

Missing validation causes denial of service in TensorFlow via `SparseTensorToCSRSparseMatrix`

Published 2022-05-20 · Modified

5.5EPSS 0.003

CVE-2022-29199

Missing validation causes denial of service in TensorFlow via `LoadAndRemapMatrix`

Published 2022-05-20 · Modified

5.5EPSS 0.003

CVE-2022-29200

Missing validation causes denial of service in TensorFlow via `LSTMBlockCell`

Published 2022-05-20 · Modified

5.5EPSS 0.003

CVE-2022-29205

Segfault due to missing support for quantized types in TensorFlow

Published 2022-05-20 · Modified

5.5EPSS 0.003

CVE-2022-29207

Undefined behavior when users supply invalid resource handles in TensorFlow

Published 2022-05-20 · Modified

5.5EPSS 0.003

CVE-2022-29212

Core dump when loading TFLite models with quantization in TensorFlow

Published 2022-05-20 · Modified

5.5EPSS 0.003

CVE-2022-29202

Denial of service in TensorFlow due to lack of validation in `tf.ragged.constant`

Published 2022-05-20 · Modified

5.5EPSS 0.003

CVE-2022-29211

Segfault in TensorFlow if `tf.histogram_fixed_width` is called with NaN values

Published 2022-05-20 · Modified

5.5EPSS 0.003

CVE-2022-29213

Incomplete validation in signal ops leads to crashes in TensorFlow

Published 2022-05-20 · Modified

5.5EPSS 0.003

Google TensorFlow 2.7.0

Security check