CRITICAL9.1CVE-2021-35958TensorFlow through 2.5.0 allows attackers to overwrite arbitrary files via a crafted archive when tf.keras.utils.get_file is used with extr… from 0, < 2.5.1
CRITICAL9.1CVE-2022-35938OOB read in `Gather_nd` op in TensorFlow Lite Micro >= 2.7.0, < 2.7.2, >= 2.8.0, < 2.8.1, >= 2.9.0, < 2.9.1
CRITICAL9.1CVE-2020-26269Heap out of bounds read in filesystem glob matching in TensorFlow >= 2.4.0-rc0, < 2.4.0, >= 2.4.0-rc1, < 2.4.0, >= 2.4.0-rc2, < 2.4.0, >= 2.4.0-rc3, < 2.4.0, >= 2.4.0-rc4, < 2.4.0
HIGH8.8Out of bounds write in Tensorflow
from 0, < 2.5.3, >= 2.6.0, < 2.6.3, >= 2.7.0, < 2.7.1
HIGH8.8Out of bounds write in TFLite
from 0, < 2.5.3, >= 2.6.0, < 2.6.3, >= 2.7.0, < 2.7.1
HIGH8.8Read and Write outside of bounds in TFLite
from 0, < 2.5.3, >= 2.6.0, < 2.6.3, >= 2.7.0, < 2.7.1
HIGH8.8Integer overflow in TFLite
from 0, < 2.5.3, >= 2.6.0, < 2.6.3, >= 2.7.0, < 2.7.1
HIGH8.8Out of bounds read in Tensorflow
>= 2.7.0, < 2.7.1
HIGH8.8Integer overflow in Tensorflow
from 0, < 2.5.3, >= 2.6.0, < 2.6.3, >= 2.7.0, < 2.7.1
HIGH8.8Out of bounds read and write in Tensorflow
from 0, < 2.5.3, >= 2.6.0, < 2.6.3, >= 2.7.0, < 2.7.1
HIGH8.7Segfault and data corruption in tensorflow-lite
from 0, < 1.15.4, >= 2.0.0, < 2.0.3, >= 2.1.0, < 2.1.2, >= 2.2.0, < 2.2.1, >= 2.3.0, < 2.3.1
HIGH8.1Buffer overflow in `CONV_3D_TRANSPOSE` on TFLite
from 0, < 2.8.4, >= 2.9.0, < 2.9.3, >= 2.10.0, < 2.10.1
HIGH8.1Out of bounds read in Tensorflow
>= 2.7.0, < 2.8.0
HIGH8.1Out of bounds read in Tensorflow
from 0, < 2.5.3, >= 2.6.0, < 2.6.3, >= 2.7.0, < 2.7.1
HIGH8.1Out of bounds read in Tensorflow
from 0, < 2.5.3, >= 2.6.0, < 2.6.3, >= 2.7.0, < 2.7.1
HIGH8.1Out of bounds read in Tensorflow
from 0, < 2.5.3, >= 2.6.0, < 2.6.3, >= 2.7.0, < 2.7.1
HIGH8.0TensorFlow has double free in Fractional(Max/Avg)Pool
from 0, < 2.12.0
HIGH7.8Code injection in `saved_model_cli` in TensorFlow
from 0, < 2.6.4, >= 2.7.0, < 2.7.2, >= 2.8.0, < 2.8.1
HIGH7.8Reference binding to nullptr in `RaggedTensorToVariant` in TensorFlow
>= 2.3.0, < 2.3.4, >= 2.4.0, < 2.4.3, >= 2.5.0, < 2.5.1
HIGH7.8Null pointer dereference in TensorFlow Lite
>= 2.3.0, < 2.3.4, >= 2.4.0, < 2.4.3, >= 2.5.0, < 2.5.1
HIGH7.8Null pointer dereference in TensorFlow Lite MLIR optimizations
>= 2.3.0, < 2.3.4, >= 2.4.0, < 2.4.3, >= 2.5.0, < 2.5.1
HIGH7.6Use after free in `DecodePng` in Tensorflow
from 0, < 2.5.3, >= 2.6.0, < 2.6.3, >= 2.7.0, < 2.7.1
HIGH7.6Integer overflow in Tensorflow
from 0, < 2.5.3, >= 2.6.0, < 2.6.3, >= 2.7.0, < 2.7.1
HIGH7.6Integer overflow in TFLite array creation
from 0, < 2.5.3, >= 2.6.0, < 2.6.3, >= 2.7.0, < 2.7.1
HIGH7.6Heap overflow in Tensorflow
from 0, < 2.5.3, >= 2.6.0, < 2.6.3, >= 2.7.0, < 2.7.1
HIGH7.6Undefined behavior in Tensorflow
from 0, < 2.5.3, >= 2.6.0, < 2.6.3, >= 2.7.0, < 2.7.1
HIGH7.6Uninitialized variable access in Tensorflow
from 0, < 2.5.3, >= 2.6.0, < 2.6.3, >= 2.7.0, < 2.7.1
HIGH7.6Integer overflow in Tensorflow
from 0, < 2.5.3, >= 2.6.0, < 2.6.3, >= 2.7.0, < 2.7.1
HIGH7.5An issue was discovered TensorFlow v2.18.0.
>= 2.18.0, < 2.18.1
HIGH7.5TensorFlow segfault in array_ops.upper_bound
from 0, < 2.12.1
HIGH7.5TensorFlow vulnerable to Out-of-Bounds Read in DynamicStitch
from 0, < 2.12.0
HIGH7.5TensorFlow vulnerable to seg fault in `tf.raw_ops.Print`
from 0, < 2.12.0
HIGH7.5TensorFlow vulnerable to integer overflow in EditDistance
from 0, < 2.12.0
HIGH7.5TensorFlow has Null Pointer Error in TensorArrayConcatV2
from 0, < 2.12.0
HIGH7.5TensorFlow vulnerable to Heap Buffer Overflow in AvgPoolGrad
from 0, < 2.12.0
HIGH7.5TensorFlow has Null Pointer Error in SparseSparseMaximum
from 0, < 2.12.0
HIGH7.5TensorFlow has Floating Point Exception in AudioSpectrogram
from 0, < 2.12.0
HIGH7.5TensorFlow has Floating Point Exception in AvgPoolGrad with XLA
from 0, < 2.12.0
HIGH7.5TensorFlow has Null Pointer Error in QuantizedMatMulWithBiasAndDequantize
from 0, < 2.12.0
HIGH7.5TensorFlow has segmentation fault in tfg-translate
from 0, < 2.12.0
HIGH7.5TensorFlow has Null Pointer Error in LookupTableImportV2
from 0, < 2.12.0
HIGH7.5TensorFlow has Floating Point Exception in TensorListSplit with XLA
from 0, < 2.12.0
HIGH7.5TensorFlow has Null Pointer Error in RandomShuffle with XLA enable
from 0, < 2.12.0
HIGH7.5TensorFlow has Segfault in Bincount with XLA
from 0, < 2.12.0
HIGH7.5TensorFlow has null dereference on ParallelConcat with XLA
from 0, < 2.12.0
HIGH7.5TensorFlow has Floating Point Exception in TFLite in conv kernel
from 0, < 2.12.0
HIGH7.5TensorFlow vulnerable to Out-of-Bounds Read in GRUBlockCellGrad
from 0, < 2.12.0
HIGH7.5Segfault in `RaggedBincount` in TensorFlow
from 0, < 2.7.2, >= 2.8.0, < 2.8.1, >= 2.9.0, < 2.9.1
HIGH7.5`CHECK` fail in `EmptyTensorList` in TensorFlow
from 0, < 2.7.2, >= 2.8.0, < 2.8.1, >= 2.9.0, < 2.9.1
HIGH7.5`CHECK`-fail in `tensorflow::full_type::SubstituteFromAttrs` in TensorFlow
from 0, < 2.7.2, >= 2.8.0, < 2.8.1, >= 2.9.0, < 2.9.1
HIGH7.5Integer overflow in math ops in TensorFlow
from 0, < 2.7.2, >= 2.8.0, < 2.8.1, >= 2.9.0, < 2.9.1
HIGH7.5Stack overflow in Tensorflow
from 0, < 2.5.3, >= 2.6.0, < 2.6.3, >= 2.7.0, < 2.7.1
HIGH7.3Out of bounds read via null pointer dereference in TensorFlow
>= 2.3.0, < 2.3.4, >= 2.4.0, < 2.4.3, >= 2.5.0, < 2.5.1
HIGH7.1Out of bounds write in grappler in Tensorflow
from 0, < 2.8.4, >= 2.9.0, < 2.9.3, >= 2.10.0, < 2.10.1
HIGH7.1FractionalMaxPool and FractionalAVGPool heap out-of-bounds acess in Tensorflow
from 0, < 2.8.4, >= 2.9.0, < 2.9.3, >= 2.10.0, < 2.10.1
HIGH7.1Segfault and Out-of-bounds Write write due to incomplete validation in TensorFlow
from 0, < 2.6.4, >= 2.7.0, < 2.7.2, >= 2.8.0, < 2.8.1
HIGH7.1Insecure temporary file in Tensorflow
from 0, < 2.5.3, >= 2.6.0, < 2.6.3, >= 2.7.0, < 2.7.1
HIGH7.1Interpreter crash from `tf.io.decode_raw`
from 0, < 2.1.4, >= 2.2.0, < 2.2.3, >= 2.3.0, < 2.3.3, >= 2.4.0, < 2.4.2
HIGH7.1Integer overflow in TFLite memory allocation
from 0, < 2.1.4, >= 2.2.0, < 2.2.3, >= 2.3.0, < 2.3.3, >= 2.4.0, < 2.4.2
HIGH7.0Out of bounds write in `scatter_nd` op in TensorFlow Lite
>= 2.7.0, < 2.7.2, >= 2.8.0, < 2.8.1, >= 2.9.0, < 2.9.1
HIGH7.0OOB read in `Gather_nd` op in TensorFlow Lite
>= 2.7.0, < 2.7.2, >= 2.8.0, < 2.8.1, >= 2.9.0, < 2.9.1
MEDIUM6.8ThreadUnsafeUnigramCandidateSampler Heap out of bounds in Tensorflow
from 0, < 2.8.4, >= 2.9.0, < 2.9.3, >= 2.10.0, < 2.10.1
MEDIUM6.8Out of bounds segmentation fault due to unequal op inputs in Tensorflow
>= 2.10.0, < 2.10.1
MEDIUM6.5TensorFlow v2.18.0 was discovered to output random results when compiling Embedding, leading to unexpected behavior in the application.
>= 2.18.0, < 2.18.1
MEDIUM6.5Denial of Service in TensorFlow
from 0, < 2.11.1
MEDIUM6.5TensorFlow vulnerable to segfault when opening multiframe gif
from 0, < 2.12.0
MEDIUM6.5`CHECK`-failures in binary ops in Tensorflow
from 0, < 2.5.3, >= 2.6.0, < 2.6.3, >= 2.7.0, < 2.7.1
MEDIUM6.5`CHECK`-failures in `TensorByteSize` in Tensorflow
from 0, < 2.5.3, >= 2.6.0, < 2.6.3, >= 2.7.0, < 2.7.1
MEDIUM6.5`CHECK`-failures during Grappler's `SafeToRemoveIdentity` in Tensorflow
from 0, < 2.5.3, >= 2.6.0, < 2.6.3, >= 2.7.0, < 2.7.1
MEDIUM6.5Integer overflow in Tensorflow
from 0, < 2.5.3, >= 2.6.0, < 2.6.3, >= 2.7.0, < 2.7.1
MEDIUM6.5Integer overflow in Tensorflow
from 0, < 2.5.3, >= 2.6.0, < 2.6.3, >= 2.7.0, < 2.7.1
MEDIUM6.5Null-dereference in Tensorflow
from 0, < 2.5.3, >= 2.6.0, < 2.6.3, >= 2.7.0, < 2.7.1
MEDIUM6.5Division by zero in Tensorflow
from 0, < 2.5.3, >= 2.6.0, < 2.6.3, >= 2.7.0, < 2.7.1
MEDIUM6.5`CHECK`-failures in Tensorflow
from 0, < 2.5.3, >= 2.6.0, < 2.6.3, >= 2.7.0, < 2.7.1
MEDIUM6.5Type confusion leading to segfault in Tensorflow
from 0, < 2.5.3, >= 2.6.0, < 2.6.3, >= 2.7.0, < 2.7.1
MEDIUM6.5Overflow and uncaught divide by zero in Tensorflow
from 0, < 2.5.3, >= 2.6.0, < 2.6.3, >= 2.7.0, < 2.7.1
MEDIUM6.5Division by zero in Tensorflow
from 0, < 2.5.3, >= 2.6.0, < 2.6.3, >= 2.7.0, < 2.7.1
MEDIUM6.5Reachable Assertion in Tensorflow
from 0, < 2.5.3, >= 2.6.0, < 2.6.3, >= 2.7.0, < 2.7.1
MEDIUM6.5`CHECK`-failures in Tensorflow
from 0, < 2.5.3, >= 2.6.0, < 2.6.3, >= 2.7.0, < 2.7.1
MEDIUM6.5Division by zero in TFLite
from 0, < 2.5.3, >= 2.6.0, < 2.6.3, >= 2.7.0, < 2.7.1
MEDIUM6.5Division by zero in TFLite
from 0, < 2.5.3, >= 2.6.0, < 2.6.3, >= 2.7.0, < 2.7.1
MEDIUM6.5Null pointer dereference in TensorFlow
from 0, < 2.5.3, >= 2.6.0, < 2.6.3, >= 2.7.0, < 2.7.1
MEDIUM6.5Integer overflow leading to crash in Tensorflow
from 0, < 2.5.3, >= 2.6.0, < 2.6.3, >= 2.7.0, < 2.7.1
MEDIUM6.5Assertion failure based denial of service in Tensorflow
from 0, < 2.5.3, >= 2.6.0, < 2.6.3, >= 2.7.0, < 2.7.1
MEDIUM6.5Integer overflows in Tensorflow
from 0, < 2.5.3, >= 2.6.0, < 2.6.3, >= 2.7.0, < 2.7.1
MEDIUM6.5Integer overflows in Tensorflow
from 0, < 2.5.3, >= 2.6.0, < 2.6.3, >= 2.7.0, < 2.7.1
MEDIUM6.5`CHECK`-fails when building invalid tensor shapes in Tensorflow
from 0, < 2.5.3, >= 2.6.0, < 2.6.3, >= 2.7.0, < 2.7.1
MEDIUM6.5Null-dereference in Tensorflow
from 0, < 2.5.3, >= 2.6.0, < 2.6.3, >= 2.7.0, < 2.7.1
MEDIUM6.5Null pointer dereference in Grappler's `IsConstant` in Tensorflow
from 0, < 2.5.3, >= 2.6.0, < 2.6.3, >= 2.7.0, < 2.7.1
MEDIUM6.5Reachable Assertion in Tensorflow
from 0, < 2.5.3, >= 2.6.0, < 2.6.3, >= 2.7.0, < 2.7.1
MEDIUM6.5Crash when type cannot be specialized in Tensorflow
from 0, < 2.5.3, >= 2.6.0, < 2.6.3, >= 2.7.0, < 2.7.1
MEDIUM6.5`CHECK`-fails due to attempting to build a reference tensor in Tensorflow
from 0, < 2.5.3, >= 2.6.0, < 2.6.3, >= 2.7.0, < 2.7.1
MEDIUM6.5Multiple `CHECK`-fails in `function.cc` in Tensorflow
from 0, < 2.5.3, >= 2.6.0, < 2.6.3, >= 2.7.0, < 2.7.1
MEDIUM6.5Abort caused by allocating a vector that is too large in Tensorflow
from 0, < 2.5.3, >= 2.6.0, < 2.6.3, >= 2.7.0, < 2.7.1
MEDIUM6.5`CHECK`-failures during Grappler's `IsSimplifiableReshape` in Tensorflow
from 0, < 2.5.3, >= 2.6.0, < 2.6.3, >= 2.7.0, < 2.7.1
MEDIUM6.3Incomplete validation in `tf.raw_ops.CTCLoss`
from 0, < 2.1.4, >= 2.2.0, < 2.2.3, >= 2.3.0, < 2.3.3, >= 2.4.0, < 2.4.2
MEDIUM5.9`CHECK` fail in `Save` and `SaveSlices` in TensorFlow
from 0, < 2.7.2, >= 2.8.0, < 2.8.1, >= 2.9.0, < 2.9.1
MEDIUM5.9`CHECK` fail in `ParameterizedTruncatedNormal` in TensorFlow
from 0, < 2.7.2, >= 2.8.0, < 2.8.1, >= 2.9.0, < 2.9.1
MEDIUM5.9`CHECK` fail in `LRNGrad` in TensorFlow
from 0, < 2.7.2, >= 2.8.0, < 2.8.1, >= 2.9.0, < 2.9.1
MEDIUM5.9`CHECK` fail in `tf.linalg.matrix_rank` in TensorFlow
from 0, < 2.7.2, >= 2.8.0, < 2.8.1, >= 2.9.0, < 2.9.1