Vulnerabilities

Google TensorFlow 2.5.0

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

57CVEs

CVE-2021-37678

Arbitrary code execution due to YAML deserialization

Published 2021-08-12 · Modified

9.3EPSS 0.004

CVE-2021-37639

Null pointer dereference and heap OOB read in TensorFlow

Published 2021-08-12 · Modified

8.4EPSS 0.002

CVE-2021-37662

Reference binding to nullptr in boosted trees in TensorFlow

Published 2021-08-12 · Modified

7.8EPSS 0.002

CVE-2021-37648

Incorrect validation of `SaveV2` inputs in TensorFlow

Published 2021-08-12 · Modified

7.8EPSS 0.002

CVE-2021-37665

Incomplete validation in MKL requantization in TensorFlow

Published 2021-08-12 · Modified

7.8EPSS 0.002

CVE-2021-37650

Segfault and heap buffer overflow in `{Experimental,}DatasetToTFRecord` in TensorFlow

Published 2021-08-12 · Modified

7.8EPSS 0.002

CVE-2021-37679

Heap OOB in nested `tf.map_fn` with `RaggedTensor`s in TensorFlow

Published 2021-08-12 · Modified

7.8EPSS 0.002

CVE-2021-37659

Out of bounds read via null pointer dereference in TensorFlow

Published 2021-08-12 · Modified

7.8EPSS 0.002

CVE-2021-37651

Heap buffer overflow in `FractionalAvgPoolGrad` in TensorFlow

Published 2021-08-12 · Modified

7.8EPSS 0.002

CVE-2021-37676

Reference binding to nullptr in shape inference in TensorFlow

Published 2021-08-12 · Modified

7.8EPSS 0.002

CVE-2021-37671

Reference binding to nullptr in map operations in TensorFlow

Published 2021-08-12 · Modified

7.8EPSS 0.002

CVE-2021-37652

Use after free in boosted trees creation in TensorFlow

Published 2021-08-12 · Modified

7.8EPSS 0.002

CVE-2021-37667

Reference binding to nullptr in unicode encoding in TensorFlow

Published 2021-08-12 · Modified

7.8EPSS 0.002

CVE-2021-37681

Null pointer exception in TensorFlow Lite

Published 2021-08-12 · Modified

7.8EPSS 0.002

CVE-2021-37663

Incomplete validation in `QuantizeV2` in TensorFlow

Published 2021-08-12 · Modified

7.8EPSS 0.002

CVE-2021-37666

Reference binding to nullptr in `RaggedTensorToVariant` in TensorFlow

Published 2021-08-12 · Modified

7.8EPSS 0.002

CVE-2021-37638

Null pointer dereference in `RaggedTensorToTensor` in TensorFlow

Published 2021-08-12 · Modified

7.8EPSS 0.002

CVE-2021-37656

Reference binding to nullptr in `RaggedTensorToSparse` in TensorFlow

Published 2021-08-12 · Modified

7.8EPSS 0.002

CVE-2021-37657

Reference binding to nullptr in `MatrixDiagV*` ops in TensorFlow

Published 2021-08-12 · Modified

7.8EPSS 0.002

CVE-2021-37658

Reference binding to nullptr in `MatrixSetDiagV*` ops in TensorFlow

Published 2021-08-12 · Modified

7.8EPSS 0.002

CVE-2021-37689

Null pointer dereference in TensorFlow Lite MLIR optimizations

Published 2021-08-12 · Modified

7.8EPSS 0.002

CVE-2021-37688

Null pointer dereference in TensorFlow Lite

Published 2021-08-12 · Modified

7.8EPSS 0.002

CVE-2021-37643

Null pointer dereference in `MatrixDiagPartOp` in TensorFlow

Published 2021-08-12 · Modified

7.7EPSS 0.002

CVE-2021-37637

Null pointer dereference in `CompressElement` in TensorFlow

Published 2021-08-12 · Modified

7.7EPSS 0.002

CVE-2021-37647

Null pointer dereference in `SparseTensorSliceDataset` in TensorFlow

Published 2021-08-12 · Modified

7.7EPSS 0.002

CVE-2021-37649

Null pointer dereference in `UncompressElement` in TensorFlow

Published 2021-08-12 · Modified

7.7EPSS 0.002

CVE-2021-37655

Heap OOB in `ResourceScatterUpdate` in TensorFlow

Published 2021-08-12 · Modified

7.3EPSS 0.002

CVE-2021-37635

Heap out of bounds access in sparse reduction operations in TensorFlow

Published 2021-08-12 · Modified

7.3EPSS 0.002

CVE-2021-37654

Heap OOB and CHECK fail in `ResourceGather` in TensorFlow

Published 2021-08-12 · Modified

7.3EPSS 0.002

CVE-2021-37641

Heap OOB in `RaggedGather` in TensorFlow

Published 2021-08-12 · Modified

7.3EPSS 0.002

CVE-2021-37664

Heap OOB in boosted trees in TensorFlow

Published 2021-08-12 · Modified

7.3EPSS 0.002

CVE-2021-37682

Use of unitialized value in TensorFlow Lite

Published 2021-08-12 · Modified

7.1EPSS 0.002

CVE-2021-37690

Use after free and segfault in shape inference functions in TensorFlow

Published 2021-08-12 · Modified

6.6EPSS 0.002

CVE-2021-37687

Heap OOB in TensorFlow Lite's `Gather*` implementations

Published 2021-08-12 · Modified

5.5EPSS 0.002

CVE-2021-37674

Incomplete validation in `MaxPoolGrad` in TensorFlow

Published 2021-08-12 · Modified

5.5EPSS 0.002

CVE-2021-37669

Crash in NMS ops caused by integer conversion to unsigned in TensorFlow

Published 2021-08-12 · Modified

5.5EPSS 0.002

CVE-2021-37686

Infinite loop in TensorFlow Lite

Published 2021-08-12 · Modified

5.5EPSS 0.002

CVE-2021-37672

Heap OOB in `SdcaOptimizerV2` in TensorFlow

Published 2021-08-12 · Modified

5.5EPSS 0.002

CVE-2021-37685

Heap OOB in TensorFlow Lite

Published 2021-08-12 · Modified

5.5EPSS 0.002

CVE-2021-37670

Heap OOB in `UpperBound` and `LowerBound` in TensorFlow

Published 2021-08-12 · Modified

5.5EPSS 0.002

Google TensorFlow 2.5.0

Security check