Buffer overflow in Google Tensorflow

CVE-2025-0649

Incorrect JSON input stringification in Google's Tensorflow serving versions up to 2.18.0 allows for potentially unbounded recursion leading to server crash.

Vulnerability class: Buffer Overflow

EPSS: 0.001 (33.9th percentile) — read the EPSS interpretation.

Affected products

Weakness classification (CWE)

References