Vulnerabilities

Google TensorFlow 2.6.0

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

67CVEs

CVE-2021-37678

Arbitrary code execution due to YAML deserialization

Published 2021-08-12 · Modified

9.3EPSS 0.004

CVE-2021-37639

Null pointer dereference and heap OOB read in TensorFlow

Published 2021-08-12 · Modified

8.4EPSS 0.002

CVE-2021-41201

Unitialized access in `EinsumHelper::ParseEquation`

Published 2021-11-05 · Modified

7.8EPSS 0.002

CVE-2021-41214

Reference binding to `nullptr` in `tf.ragged.cross`

Published 2021-11-05 · Modified

7.8EPSS 0.002

CVE-2021-41219

Undefined behavior via `nullptr` reference binding in sparse matrix multiplication

Published 2021-11-05 · Modified

7.8EPSS 0.002

CVE-2021-37662

Reference binding to nullptr in boosted trees in TensorFlow

Published 2021-08-12 · Modified

7.8EPSS 0.002

CVE-2021-37648

Incorrect validation of `SaveV2` inputs in TensorFlow

Published 2021-08-12 · Modified

7.8EPSS 0.002

CVE-2021-37665

Incomplete validation in MKL requantization in TensorFlow

Published 2021-08-12 · Modified

7.8EPSS 0.002

CVE-2021-37650

Segfault and heap buffer overflow in `{Experimental,}DatasetToTFRecord` in TensorFlow

Published 2021-08-12 · Modified

7.8EPSS 0.002

CVE-2021-37679

Heap OOB in nested `tf.map_fn` with `RaggedTensor`s in TensorFlow

Published 2021-08-12 · Modified

7.8EPSS 0.002

CVE-2021-37659

Out of bounds read via null pointer dereference in TensorFlow

Published 2021-08-12 · Modified

7.8EPSS 0.002

CVE-2021-37651

Heap buffer overflow in `FractionalAvgPoolGrad` in TensorFlow

Published 2021-08-12 · Modified

7.8EPSS 0.002

CVE-2021-37667

Reference binding to nullptr in unicode encoding in TensorFlow

Published 2021-08-12 · Modified

7.8EPSS 0.002

CVE-2021-37671

Reference binding to nullptr in map operations in TensorFlow

Published 2021-08-12 · Modified

7.8EPSS 0.002

CVE-2021-37676

Reference binding to nullptr in shape inference in TensorFlow

Published 2021-08-12 · Modified

7.8EPSS 0.002

CVE-2021-37652

Use after free in boosted trees creation in TensorFlow

Published 2021-08-12 · Modified

7.8EPSS 0.002

CVE-2021-37681

Null pointer exception in TensorFlow Lite

Published 2021-08-12 · Modified

7.8EPSS 0.002

CVE-2021-37666

Reference binding to nullptr in `RaggedTensorToVariant` in TensorFlow

Published 2021-08-12 · Modified

7.8EPSS 0.002

CVE-2021-37663

Incomplete validation in `QuantizeV2` in TensorFlow

Published 2021-08-12 · Modified

7.8EPSS 0.002

CVE-2021-37638

Null pointer dereference in `RaggedTensorToTensor` in TensorFlow

Published 2021-08-12 · Modified

7.8EPSS 0.002

CVE-2021-37656

Reference binding to nullptr in `RaggedTensorToSparse` in TensorFlow

Published 2021-08-12 · Modified

7.8EPSS 0.002

CVE-2021-37657

Reference binding to nullptr in `MatrixDiagV*` ops in TensorFlow

Published 2021-08-12 · Modified

7.8EPSS 0.002

CVE-2021-37658

Reference binding to nullptr in `MatrixSetDiagV*` ops in TensorFlow

Published 2021-08-12 · Modified

7.8EPSS 0.002

CVE-2021-37689

Null pointer dereference in TensorFlow Lite MLIR optimizations

Published 2021-08-12 · Modified

7.8EPSS 0.002

CVE-2021-37688

Null pointer dereference in TensorFlow Lite

Published 2021-08-12 · Modified

7.8EPSS 0.002

CVE-2021-37643

Null pointer dereference in `MatrixDiagPartOp` in TensorFlow

Published 2021-08-12 · Modified

7.7EPSS 0.002

CVE-2021-37637

Null pointer dereference in `CompressElement` in TensorFlow

Published 2021-08-12 · Modified

7.7EPSS 0.002

CVE-2021-37647

Null pointer dereference in `SparseTensorSliceDataset` in TensorFlow

Published 2021-08-12 · Modified

7.7EPSS 0.002

CVE-2021-37649

Null pointer dereference in `UncompressElement` in TensorFlow

Published 2021-08-12 · Modified

7.7EPSS 0.002

CVE-2021-37655

Heap OOB in `ResourceScatterUpdate` in TensorFlow

Published 2021-08-12 · Modified

7.3EPSS 0.002

CVE-2021-37635

Heap out of bounds access in sparse reduction operations in TensorFlow

Published 2021-08-12 · Modified

7.3EPSS 0.002

CVE-2021-37654

Heap OOB and CHECK fail in `ResourceGather` in TensorFlow

Published 2021-08-12 · Modified

7.3EPSS 0.002

CVE-2021-37641

Heap OOB in `RaggedGather` in TensorFlow

Published 2021-08-12 · Modified

7.3EPSS 0.002

CVE-2021-37664

Heap OOB in boosted trees in TensorFlow

Published 2021-08-12 · Modified

7.3EPSS 0.002

CVE-2021-41212

Heap OOB read in `tf.ragged.cross`

Published 2021-11-05 · Modified

7.1EPSS 0.002

CVE-2021-41211

Heap OOB read in shape inference for `QuantizeV2`

Published 2021-11-05 · Modified

7.1EPSS 0.002

CVE-2021-37682

Use of unitialized value in TensorFlow Lite

Published 2021-08-12 · Modified

7.1EPSS 0.002

CVE-2021-41210

Heap OOB read in `tf.raw_ops.SparseCountSparseOutput`

Published 2021-11-05 · Modified

7.1EPSS 0.002

CVE-2021-37690

Use after free and segfault in shape inference functions in TensorFlow

Published 2021-08-12 · Modified

6.6EPSS 0.002

CVE-2021-41200

Incomplete validation in `tf.summary.create_file_writer`

Published 2021-11-05 · Modified

5.5EPSS 0.002

Google TensorFlow 2.6.0

Security check