TensorFlow Support & Health

Security

Known Vulnerabilities

10 active CVEs reported via OSV.dev

GHSA-23hm-7w47-xw72 CVSS_V3

Out of bounds read in Tensorflow

Published: 2022-02-09 Fixed in: 2.5.3

GHSA-2475-53vw-vp25 CVSS_V3

TensorFlow vulnerable to `CHECK` fail in `AvgPoolGrad`

Published: 2022-09-16 Fixed in: 2.7.2

GHSA-247x-2f9f-5wp7 CVSS_V3

Stack overflow in TensorFlow

Published: 2022-02-09 Fixed in: 2.5.3

GHSA-24x4-6qmh-88qg CVSS_V3

Use after free in `DecodePng` kernel

Published: 2022-02-09 Fixed in: 2.5.3

GHSA-24x6-8c7m-hv3f CVSS_V3

Heap OOB read in TFLite's implementation of `Minimum` or `Maximum`

Published: 2021-05-21 Fixed in: 2.1.4

GHSA-26j7-6w8w-7922 CVSS_V3

Division by zero in optimized pooling implementations in TFLite

Published: 2021-05-21 Fixed in: 2.1.4

GHSA-278g-rq84-9hmg CVSS_V3

`CHECK`-fail in `MapStage`

Published: 2021-08-25 Fixed in: 2.3.4

GHSA-27j5-4p9v-pp67 CVSS_V3

`std::abort` raised from `TensorListReserve`

Published: 2021-08-25 Fixed in: 2.3.4

GHSA-27qf-jwm8-g7f3 CVSS_V3

FPE in LSH in TFLite

Published: 2021-08-25 Fixed in: 2.3.4

GHSA-27rc-728f-x5w2 CVSS_V3

`CHECK` fail via inputs in `SdcaOptimizer`

Published: 2022-11-21 Fixed in: 2.8.4