Google Tensorflow
432 CVEs affecting Google Tensorflow. Latest disclosed: 2025-09-25. Critical: 7, High: 111.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-25668 | Critical | 9.8 | 2023-03-25 | TensorFlow is an open source platform for machine learning. Attackers using Tensorflow prior to 2.12.0 or 2.11.1 can access heap memory which is not in the con… |
CVE-2018-7575 | Critical | 9.8 | 2019-04-24 | Google TensorFlow 1.7.x and earlier is affected by a Buffer Overflow vulnerability. The type of exploitation is context-dependent. |
CVE-2021-37678 | Critical | 9.3 | 2021-08-12 | TensorFlow is an end-to-end open source platform for machine learning. In affected versions TensorFlow and Keras can be tricked to perform arbitrary code execu… |
CVE-2021-35958 | Critical | 9.1 | 2021-06-30 | TensorFlow through 2.5.0 allows attackers to overwrite arbitrary files via a crafted archive when tf.keras.utils.get_file is used with extract=True. NOTE: the… |
CVE-2020-15206 | Critical | 9.0 | 2020-09-25 | In Tensorflow before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1, changing the TensorFlow's `SavedModel` protocol buffer and altering the name of required k… |
CVE-2020-15205 | Critical | 9.0 | 2020-09-25 | In Tensorflow before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1, the `data_splits` argument of `tf.raw_ops.StringNGrams` lacks validation. This allows a us… |
CVE-2020-15202 | Critical | 9.0 | 2020-09-25 | In Tensorflow before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1, the `Shard` API in TensorFlow expects the last argument to be a function taking two `int64… |
CVE-2022-23594 | High | 8.8 | 2022-02-04 | Tensorflow is an Open Source Machine Learning Framework. The TFG dialect of TensorFlow (MLIR) makes several assumptions about the incoming `GraphDef` before co… |
CVE-2022-23587 | High | 8.8 | 2022-02-04 | Tensorflow is an Open Source Machine Learning Framework. Under certain scenarios, Grappler component of TensorFlow is vulnerable to an integer overflow during… |
CVE-2022-23574 | High | 8.8 | 2022-02-04 | Tensorflow is an Open Source Machine Learning Framework. There is a typo in TensorFlow's `SpecializeType` which results in heap OOB read/write. Due to a typo… |
CVE-2022-23566 | High | 8.8 | 2022-02-04 | Tensorflow is an Open Source Machine Learning Framework. TensorFlow is vulnerable to a heap OOB write in `Grappler`. The `set_output` function writes to an arr… |
CVE-2022-23561 | High | 8.8 | 2022-02-04 | Tensorflow is an Open Source Machine Learning Framework. An attacker can craft a TFLite model that would cause a write outside of bounds of an array in TFLite… |
CVE-2022-23560 | High | 8.8 | 2022-02-04 | Tensorflow is an Open Source Machine Learning Framework. An attacker can craft a TFLite model that would allow limited reads and writes outside of arrays in TF… |
CVE-2022-23559 | High | 8.8 | 2022-02-04 | Tensorflow is an Open Source Machine Learning Framework. An attacker can craft a TFLite model that would cause an integer overflow in embedding lookup operatio… |
CVE-2021-41208 | High | 8.8 | 2021-11-05 | TensorFlow is an open source platform for machine learning. In affected versions the code for boosted trees in TensorFlow is still missing validation. As a res… |
CVE-2018-8825 | High | 8.8 | 2019-04-23 | Google TensorFlow 1.7 and below is affected by: Buffer Overflow. The impact is: execute arbitrary code (local). |
CVE-2020-15207 | High | 8.7 | 2020-09-25 | In tensorflow-lite before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1, to mimic Python's indexing with negative values, TFLite uses `ResolveAxis` to convert… |
CVE-2020-15196 | High | 8.5 | 2020-09-25 | In Tensorflow version 2.3.0, the `SparseCountSparseOutput` and `RaggedCountSparseOutput` implementations don't validate that the `weights` tensor has the same… |
CVE-2020-15195 | High | 8.5 | 2020-09-25 | In Tensorflow before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1, the implementation of `SparseFillEmptyRowsGrad` uses a double indexing pattern. It is poss… |
CVE-2021-37639 | High | 8.4 | 2021-08-12 | TensorFlow is an end-to-end open source platform for machine learning. When restoring tensors via raw APIs, if the tensor name is not provided, TensorFlow can… |