PyPIPackage

tensorflow-cpu

424 known vulnerabilities (5 critical, 103 high, 209 medium, 99 low), with the versions each affects and the releases that fix them.

Latest release: Not known: cve.now hasn't read this package's releases
Newest unaffected release: Not known without release data
Advisories: 424 · 5 critical, 103 high, 209 medium, 99 low

Registry: PyPI

Advisories 424

CVE-2023-33976High 7.5
TensorFlow segfault in array_ops.upper_bound
Affected: fixed in 2.12.1.
CVE-2023-25661Medium 6.5
Denial of Service in TensorFlow
Affected: fixed in 2.11.1.
CVE-2023-25660High 7.5
TensorFlow vulnerable to seg fault in `tf.raw_ops.Print`
Affected: fixed in 2.11.1.
CVE-2023-25659High 7.5
TensorFlow vulnerable to Out-of-Bounds Read in DynamicStitch
Affected: fixed in 2.11.1.
CVE-2023-25658High 7.5
TensorFlow vulnerable to Out-of-Bounds Read in GRUBlockCellGrad
Affected: fixed in 2.11.1.
CVE-2023-25662High 7.5
TensorFlow vulnerable to integer overflow in EditDistance
Affected: fixed in 2.11.1.
CVE-2023-25663High 7.5
TensorFlow has Null Pointer Error in TensorArrayConcatV2
Affected: fixed in 2.11.1.
CVE-2023-25664High 7.5
TensorFlow vulnerable to Heap Buffer Overflow in AvgPoolGrad
Affected: fixed in 2.11.1.
CVE-2023-25667Medium 6.5
TensorFlow vulnerable to segfault when opening multiframe gif
Affected: fixed in 2.11.1.
CVE-2023-25666High 7.5
TensorFlow has Floating Point Exception in AudioSpectrogram
Affected: fixed in 2.11.1.
CVE-2023-25665High 7.5
TensorFlow has Null Pointer Error in SparseSparseMaximum
Affected: fixed in 2.11.1.
CVE-2023-25668Critical 9.8
TensorFlow vulnerable to heap out-of-buffer read in the QuantizeAndDequantize operation
Affected: fixed in 2.11.1.
CVE-2023-25669High 7.5
TensorFlow has Floating Point Exception in AvgPoolGrad with XLA
Affected: fixed in 2.11.1.
CVE-2023-25670High 7.5
TensorFlow has Null Pointer Error in QuantizedMatMulWithBiasAndDequantize
Affected: fixed in 2.11.1.
CVE-2023-25671High 7.5
TensorFlow has segmentation fault in tfg-translate
Affected: fixed in 2.11.1.

Show all 424 advisoriesShow fewer advisories

CVE-2023-25672High 7.5
TensorFlow has Null Pointer Error in LookupTableImportV2
Affected: fixed in 2.11.1.
CVE-2023-25673High 7.5
TensorFlow has Floating Point Exception in TensorListSplit with XLA
Affected: fixed in 2.11.1.
CVE-2023-25674High 7.5
TensorFlow has Null Pointer Error in RandomShuffle with XLA enable
Affected: fixed in 2.11.1.
CVE-2023-25675High 7.5
TensorFlow has Segfault in Bincount with XLA
Affected: fixed in 2.11.1.
CVE-2023-25676High 7.5
TensorFlow has null dereference on ParallelConcat with XLA
Affected: fixed in 2.11.1.
CVE-2023-25801High 8.0
TensorFlow has double free in Fractional(Max/Avg)Pool
Affected: fixed in 2.11.1.
CVE-2023-27579High 7.5
TensorFlow has Floating Point Exception in TFLite in conv kernel
Affected: fixed in 2.11.1.
CVE-2022-41910Medium 4.8
Heap out of bounds read in `QuantizeAndDequantizeV2` in Tensorflow
Affected: fixed in 2.8.4; from 2.9.0, fixed in 2.9.3; from 2.10.0, fixed in 2.10.1; fixed in 2.8.4; from 2.9.0, fixed in 2.9.3; from 2.10.0, fixed in 2.10.1.
CVE-2022-41902High 7.1
Out of bounds write in grappler in Tensorflow
Affected: fixed in 2.8.4; from 2.9.0, fixed in 2.9.3; from 2.10.0, fixed in 2.10.1; fixed in 2.8.4; from 2.9.0, fixed in 2.9.3; from 2.10.0, fixed in 2.10.1.
CVE-2022-41911Medium 4.8
Invalid char to bool conversion when printing a tensor in Tensorflow
Affected: from 2.9.0, fixed in 2.9.3; fixed in 2.8.4; from 2.10.0, fixed in 2.10.1; fixed in 2.8.4; from 2.9.0, fixed in 2.9.3; from 2.10.0, fixed in 2.10.1.
CVE-2022-41909Medium 4.8
Segfault in `CompositeTensorVariantToComponents` in Tensorflow
Affected: fixed in 2.8.4; from 2.9.0, fixed in 2.9.3; from 2.10.0, fixed in 2.10.1; fixed in 2.8.4; from 2.9.0, fixed in 2.9.3; from 2.10.0, fixed in 2.10.1.
CVE-2022-41908Medium 4.8
`CHECK` fail via inputs in `PyFunc` in Tensorflow
Affected: fixed in 2.8.4; from 2.9.0, fixed in 2.9.3; from 2.10.0, fixed in 2.10.1; fixed in 2.8.4; from 2.9.0, fixed in 2.9.3; from 2.10.0, fixed in 2.10.1.
CVE-2022-41907Medium 4.8
Overflow in `ResizeNearestNeighborGrad` in Tensorflow
Affected: fixed in 2.8.4; from 2.9.0, fixed in 2.9.3; from 2.10.0, fixed in 2.10.1; fixed in 2.8.4; from 2.9.0, fixed in 2.9.3; from 2.10.0, fixed in 2.10.1.
CVE-2022-41901Medium 4.8
`CHECK_EQ` fail via input in `SparseMatrixNNZ` in Tensorflow
Affected: fixed in 2.8.4; from 2.9.0, fixed in 2.9.3; from 2.10.0, fixed in 2.10.1; fixed in 2.8.4; from 2.9.0, fixed in 2.9.3; from 2.10.0, fixed in 2.10.1.
CVE-2022-41900High 7.1
FractionalMaxPool and FractionalAVGPool heap out-of-bounds acess in Tensorflow
Affected: fixed in 2.8.4; from 2.9.0, fixed in 2.9.3; from 2.10.0, fixed in 2.10.1; fixed in 2.8.4; from 2.9.0, fixed in 2.9.3; from 2.10.0, fixed in 2.10.1.
CVE-2022-41899Medium 4.8
`CHECK` fail via inputs in `SdcaOptimizer` in Tensorflow
Affected: fixed in 2.8.4; from 2.9.0, fixed in 2.9.3; from 2.10.0, fixed in 2.10.1; fixed in 2.8.4; from 2.9.0, fixed in 2.9.3; from 2.10.0, fixed in 2.10.1.
CVE-2022-41898Medium 4.8
`CHECK` fail via inputs in `SparseFillEmptyRowsGrad` in Tensorflow
Affected: fixed in 2.8.4; from 2.9.0, fixed in 2.9.3; from 2.10.0, fixed in 2.10.1; fixed in 2.8.4; from 2.9.0, fixed in 2.9.3; from 2.10.0, fixed in 2.10.1.
CVE-2022-41897Medium 4.8
`FractionalMaxPoolGrad` Heap out of bounds read in Tensorflow
Affected: fixed in 2.8.4; from 2.9.0, fixed in 2.9.3; from 2.10.0, fixed in 2.10.1; fixed in 2.8.4; from 2.9.0, fixed in 2.9.3; from 2.10.0, fixed in 2.10.1.
CVE-2022-41896Medium 4.8
`tf.raw_ops.Mfcc` crashes in Tensorflow
Affected: fixed in 2.8.4; from 2.9.0, fixed in 2.9.3; from 2.10.0, fixed in 2.10.1; fixed in 2.8.4; from 2.9.0, fixed in 2.9.3; from 2.10.0, fixed in 2.10.1.
CVE-2022-41895Medium 4.8
`MirrorPadGrad` heap out of bounds read in Tensorflow
Affected: fixed in 2.8.4; from 2.9.0, fixed in 2.9.3; from 2.10.0, fixed in 2.10.1; fixed in 2.8.4; from 2.9.0, fixed in 2.9.3; from 2.10.0, fixed in 2.10.1.
CVE-2022-41893Medium 4.8
`CHECK_EQ` fail in `tf.raw_ops.TensorListResize` in Tensorflow
Affected: fixed in 2.8.4; from 2.9.0, fixed in 2.9.3; from 2.10.0, fixed in 2.10.1; fixed in 2.8.4; from 2.9.0, fixed in 2.9.3; from 2.10.0, fixed in 2.10.1.
CVE-2022-41891Medium 4.8
Segfault in `tf.raw_ops.TensorListConcat` in Tensorflow
Affected: fixed in 2.8.4; from 2.9.0, fixed in 2.9.3; from 2.10.0, fixed in 2.10.1; fixed in 2.8.4; from 2.9.0, fixed in 2.9.3; from 2.10.0, fixed in 2.10.1.
CVE-2022-41890Medium 4.8
`CHECK` fail in `BCast` overflow in Tensorflow
Affected: fixed in 2.8.4; from 2.9.0, fixed in 2.9.3; from 2.10.0, fixed in 2.10.1; fixed in 2.8.4; from 2.9.0, fixed in 2.9.3; from 2.10.0, fixed in 2.10.1.
CVE-2022-41889Medium 5.5
Segfault via invalid attributes in `pywrap_tfe_src.cc` in Tensorflow
Affected: fixed in 2.8.4; from 2.9.0, fixed in 2.9.3; from 2.10.0, fixed in 2.10.1; fixed in 2.8.4; from 2.9.0, fixed in 2.9.3; from 2.10.0, fixed in 2.10.1.
CVE-2022-41888Medium 4.8
Unckecked rank size in `tf.image.generate_bounding_box_proposals` in Tensorflow
Affected: fixed in 2.8.4; from 2.9.0, fixed in 2.9.3; from 2.10.0, fixed in 2.10.1; fixed in 2.8.4; from 2.9.0, fixed in 2.9.3; from 2.10.0, fixed in 2.10.1.
CVE-2022-41887Medium 4.8
Overflow in `tf.keras.losses.poisson` in Tensorflow
Affected: fixed in 2.9.3; from 2.10.0, fixed in 2.10.1; fixed in 2.9.3; from 2.10.0, fixed in 2.10.1.
CVE-2022-41886Medium 4.8
Overflow in `ImageProjectiveTransformV2` in Tensorflow
Affected: fixed in 2.8.4; from 2.9.0, fixed in 2.9.3; from 2.10.0, fixed in 2.10.1; fixed in 2.8.4; from 2.9.0, fixed in 2.9.3; from 2.10.0, fixed in 2.10.1.
CVE-2022-41885Medium 4.8
Overflow in `FusedResizeAndPadConv2D` in Tensorflow
Affected: fixed in 2.7.4; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1; fixed in 2.7.4; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1.
CVE-2022-41884Medium 4.8
Seg fault in `ndarray_tensor_bridge` due to zero and large inputs in Tensorflow
Affected: fixed in 2.8.4; from 2.9.0, fixed in 2.9.3; from 2.10.0, fixed in 2.10.1; fixed in 2.8.4; from 2.9.0, fixed in 2.9.3; from 2.10.0, fixed in 2.10.1.
CVE-2022-41883Medium 6.8
Out of bounds segmentation fault due to unequal op inputs in Tensorflow
Affected: from 2.10.0, fixed in 2.10.1.
CVE-2022-41880Medium 6.8
ThreadUnsafeUnigramCandidateSampler Heap out of bounds in Tensorflow
Affected: from 2.10.0, fixed in 2.10.1; fixed in 2.8.4; from 2.9.0, fixed in 2.9.3; fixed in 2.8.4; from 2.9.0, fixed in 2.9.3; from 2.10.0, fixed in 2.10.1.
CVE-2022-36015Medium 5.9
Integer overflow in math ops in TensorFlow
Affected: fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1; fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1.
CVE-2022-36012Medium 5.9
Assertion fail on MLIR empty edge names in TensorFlow
Affected: fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1; fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1.
CVE-2022-35996Medium 5.9
Floating point exception in `Conv2D` in TensorFlow
Affected: fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1; fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1.
CVE-2022-36027Medium 5.9
Segfault TFLite converter on per-channel quantized transposed convolutions in TensorFlow
Affected: fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1; fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1.
CVE-2022-36017Medium 5.9
Segfault in `Requantize` in TensorFlow
Affected: fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1; fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1.
CVE-2022-36014Medium 5.9
Null-dereference in `mlir::tfg::TFOp::nameAttr` in TensorFlow
Affected: fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1; fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1.
CVE-2022-36000Medium 5.9
Null dereference on MLIR on empty function attributes in TensorFlow
Affected: fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1; fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1.
CVE-2022-36011Medium 5.9
Null dereference on MLIR on empty function attributes in TensorFlow
Affected: fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1; fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1.
CVE-2022-36013Medium 5.9
Null-dereference in `mlir::tfg::GraphDefImporter::ConvertNodeDef` in TensorFlow
Affected: fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1; fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1.
CVE-2022-35994Medium 5.9
`CHECK` fail in `CollectiveGather` in TensorFlow
Affected: fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1; fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1.
CVE-2022-35993Medium 5.9
`CHECK` fail in `SetSize` in TensorFlow
Affected: fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1; fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1.
CVE-2022-35992Medium 5.9
`CHECK` fail in `TensorListFromTensor` in TensorFlow
Affected: fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1; fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1.
CVE-2022-35991Medium 5.9
`CHECK` fail in `TensorListScatter` and `TensorListScatterV2` in TensorFlow
Affected: fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1; fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1.
CVE-2022-35999Medium 5.9
`CHECK` fail in `Conv2DBackpropInput` in TensorFlow
Affected: fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1; fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1.
CVE-2022-35997Medium 5.9
`CHECK` fail in `tf.sparse.cross` in TensorFlow
Affected: fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1; fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1.
CVE-2022-35995Medium 5.9
`CHECK` fail in `AudioSummaryV2` in TensorFlow
Affected: fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1; fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1.
CVE-2022-36016Medium 5.9
`CHECK`-fail in `tensorflow::full_type::SubstituteFromAttrs` in TensorFlow
Affected: fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1; fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1.
CVE-2022-36005Medium 5.9
`CHECK` fail in `FakeQuantWithMinMaxVarsGradient` in TensorFlow
Affected: fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1; fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1.
CVE-2022-36004Medium 5.9
`CHECK` fail in `tf.random.gamma` in TensorFlow
Affected: fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1; fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1.
CVE-2022-36003Medium 5.9
`CHECK` fail in `RandomPoissonV2` in TensorFlow
Affected: fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1; fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1.
CVE-2022-36002Medium 5.9
`CHECK` fail in `Unbatch` in TensorFlow
Affected: fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1; fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1.
CVE-2022-36001Medium 5.9
`CHECK` fail in `DrawBoundingBoxes` in TensorFlow
Affected: fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1; fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1.
CVE-2022-36026Medium 5.9
`CHECK` fail in `QuantizeAndDequantizeV3` in TensorFlow
Affected: fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1; fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1.
CVE-2022-36018Medium 5.9
`CHECK` fail in `RaggedTensorToVariant` in TensorFlow
Affected: fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1; fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1.
CVE-2022-36019Medium 5.9
`CHECK` fail in `FakeQuantWithMinMaxVarsPerChannel` in TensorFlow
Affected: fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1; fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1.
CVE-2022-35990Medium 5.9
`CHECK` fail in `FakeQuantWithMinMaxVarsPerChannelGradient` in TensorFlow
Affected: fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1; fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1.
CVE-2022-35987Medium 5.9
`CHECK` fail in `DenseBincount` in TensorFlow
Affected: fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1; fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1.
CVE-2022-35985Medium 5.9
`CHECK` fail in `LRNGrad` in TensorFlow
Affected: fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1; fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1.
CVE-2022-35984Medium 5.9
`CHECK` fail in `ParameterizedTruncatedNormal` in TensorFlow
Affected: fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1; fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1.
CVE-2022-35983Medium 5.9
`CHECK` fail in `Save` and `SaveSlices` in TensorFlow
Affected: fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1; fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1.
CVE-2022-35989Medium 5.9
`CHECK` fail in `MaxPool` in TensorFlow
Affected: fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1; fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1.
CVE-2022-35988Medium 5.9
`CHECK` fail in `tf.linalg.matrix_rank` in TensorFlow
Affected: fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1; fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1.
CVE-2022-35982Medium 5.9
Segfault in `SparseBincount` in TensorFlow
Affected: fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1; fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1.
CVE-2022-35981Medium 5.9
`CHECK` fail in `FractionalMaxPoolGrad` in TensorFlow
Affected: fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1; fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1.
CVE-2022-35979Medium 5.9
Segfault in `QuantizedRelu` and `QuantizedRelu6`
Affected: fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1; fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1.
CVE-2022-35974Medium 5.9
Segfault in `QuantizeDownAndShrinkRange` in TensorFlow
Affected: fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1; fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1.
CVE-2022-35972Medium 5.9
Segfault in `QuantizedBiasAdd` in TensorFlow
Affected: fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1; fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1.
CVE-2022-35973Medium 5.9
Segfault in `QuantizedMatMul` in TensorFlow
Affected: fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1; fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1.
CVE-2022-35971Medium 5.9
`CHECK` fail in `FakeQuantWithMinMaxVars` in TensorFlow
Affected: fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1; fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1.
CVE-2022-35969Medium 5.9
`CHECK` fail in `Conv2DBackpropInput` in TensorFlow
Affected: fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1; fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1.
CVE-2022-35970Medium 5.9
Segfault in `QuantizedInstanceNorm` in TensorFlow
Affected: fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1; fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1.
CVE-2022-35968Medium 5.9
`CHECK` fail in `AvgPoolGrad` in TensorFlow
Affected: fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1; fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1.
CVE-2022-35966Medium 5.9
Segfault in `QuantizedAvgPool` in TensorFlow
Affected: fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1; fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1.
CVE-2022-35967Medium 5.9
Segfault in `QuantizedAdd` in TensorFlow
Affected: fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1; fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1.
CVE-2022-35964Medium 5.9
Segfault in `BlockLSTMGradV2` in TensorFlow
Affected: fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1; fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1.
CVE-2022-35965Medium 5.9
Segfault in `LowerBound` and `UpperBound` in TensorFlow
Affected: fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1; fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1.
CVE-2022-35963Medium 5.9
`CHECK` failures in `FractionalAvgPoolGrad` in TensorFlow
Affected: fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1; fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1.
CVE-2022-35960Medium 5.9
`CHECK` failure in `TensorListReserve` in TensorFlow
Affected: fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1; fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1.
CVE-2022-35959Medium 5.9
`CHECK` failures in `AvgPool3DGrad` in TensorFlow
Affected: fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1; fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1.
CVE-2022-35952Medium 5.9
`CHECK` failures in `UnbatchGradOp` in TensorFlow
Affected: fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1; fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1.
CVE-2022-35940Medium 5.9
Int overflow in `RaggedRangeOp` in Tensoflow
Affected: fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1; fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1.
CVE-2022-35941Medium 5.9
`CHECK` failure in `AvgPoolOp` in Tensorflow
Affected: fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.2; fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.2.
CVE-2022-35937High 7.0
OOB read in `Gather_nd` op in TensorFlow Lite
Affected: fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1; fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1.
CVE-2022-35939High 7.0
Out of bounds write in `scatter_nd` op in TensorFlow Lite
Affected: fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1; fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1.
CVE-2022-35935Medium 5.9
`CHECK` failure in `SobolSample` via missing validation in TensorFlow
Affected: fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1; fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1.
CVE-2022-35934Medium 5.9
`CHECK` failure in tf.reshape in Tensorflow
Affected: fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1; fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1.
CVE-2022-29216High 7.8
Code injection in `saved_model_cli` in TensorFlow
Affected: fixed in 2.6.4; from 2.7.0, fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; fixed in 2.6.4; from 2.7.0, fixed in 2.7.2; from 2.8.0, fixed in 2.8.1.
CVE-2022-29213Medium 5.5
Incomplete validation in signal ops leads to crashes in TensorFlow
Affected: fixed in 2.6.4; from 2.7.0, fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; fixed in 2.6.4; from 2.7.0, fixed in 2.7.2; from 2.8.0, fixed in 2.8.1.
CVE-2022-29210Medium 5.5
Heap buffer overflow due to incorrect hash function in TensorFlow
Affected: from 2.8.0, fixed in 2.8.1.
CVE-2022-29209Medium 5.5
Type confusion leading to `CHECK`-failure based denial of service in TensorFlow
Affected: fixed in 2.6.4; from 2.7.0, fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; fixed in 2.6.4; from 2.7.0, fixed in 2.7.2; from 2.8.0, fixed in 2.8.1.
CVE-2022-29211Medium 5.5
Segfault in TensorFlow if `tf.histogram_fixed_width` is called with NaN values
Affected: fixed in 2.6.4; from 2.7.0, fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; fixed in 2.6.4; from 2.7.0, fixed in 2.7.2; from 2.8.0, fixed in 2.8.1.
CVE-2022-29212Medium 5.5
Core dump when loading TFLite models with quantization in TensorFlow
Affected: fixed in 2.6.4; from 2.7.0, fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; fixed in 2.6.4; from 2.7.0, fixed in 2.7.2; from 2.8.0, fixed in 2.8.1.
CVE-2022-29201Medium 5.5
Missing validation in `QuantizedConv2D` results in undefined behavior in TensorFlow
Affected: fixed in 2.6.4; from 2.7.0, fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; fixed in 2.6.4; from 2.7.0, fixed in 2.7.2; from 2.8.0, fixed in 2.8.1.
CVE-2022-29202Medium 5.5
Denial of service in TensorFlow due to lack of validation in `tf.ragged.constant`
Affected: fixed in 2.6.4; from 2.7.0, fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; fixed in 2.6.4; from 2.7.0, fixed in 2.7.2; from 2.8.0, fixed in 2.8.1.
CVE-2022-29203Medium 5.5
Integer overflow in `SpaceToBatchND` in TensorFlow
Affected: fixed in 2.6.4; from 2.7.0, fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; fixed in 2.6.4; from 2.7.0, fixed in 2.7.2; from 2.8.0, fixed in 2.8.1.
CVE-2022-29204Medium 5.5
Missing validation causes denial of service in TensorFlow via `Conv3DBackpropFilterV2`
Affected: fixed in 2.6.4; from 2.7.0, fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; fixed in 2.6.4; from 2.7.0, fixed in 2.7.2; from 2.8.0, fixed in 2.8.1.
CVE-2022-29208High 7.1
Segfault and Out-of-bounds Write write due to incomplete validation in TensorFlow
Affected: fixed in 2.6.4; from 2.7.0, fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; fixed in 2.6.4; from 2.7.0, fixed in 2.7.2; from 2.8.0, fixed in 2.8.1.
CVE-2022-29205Medium 5.5
Segfault due to missing support for quantized types in TensorFlow
Affected: fixed in 2.6.4; from 2.7.0, fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; fixed in 2.6.4; from 2.7.0, fixed in 2.7.2; from 2.8.0, fixed in 2.8.1.
CVE-2022-29206Medium 5.5
Missing validation results in undefined behavior in `SparseTensorDenseAdd` in TensorFlow
Affected: fixed in 2.6.4; from 2.7.0, fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; fixed in 2.6.4; from 2.7.0, fixed in 2.7.2; from 2.8.0, fixed in 2.8.1.
CVE-2022-29207Medium 5.5
Undefined behavior when users supply invalid resource handles in TensorFlow
Affected: fixed in 2.6.4; from 2.7.0, fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; fixed in 2.6.4; from 2.7.0, fixed in 2.7.2; from 2.8.0, fixed in 2.8.1.
CVE-2022-29195Medium 5.5
Missing validation causes denial of service in TensorFlow via `StagePeek`
Affected: fixed in 2.6.4; from 2.7.0, fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; fixed in 2.6.4; from 2.7.0, fixed in 2.7.2; from 2.8.0, fixed in 2.8.1.
CVE-2022-29197Medium 5.5
Missing validation causes denial of service in TensorFlow via `UnsortedSegmentJoin`
Affected: fixed in 2.6.4; from 2.7.0, fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; fixed in 2.6.4; from 2.7.0, fixed in 2.7.2; from 2.8.0, fixed in 2.8.1.
CVE-2022-29196Medium 5.5
Missing validation causes denial of service in TensorFlow via `Conv3DBackpropFilterV2`
Affected: fixed in 2.6.4; from 2.7.0, fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; fixed in 2.6.4; from 2.7.0, fixed in 2.7.2; from 2.8.0, fixed in 2.8.1.
CVE-2022-29198Medium 5.5
Missing validation causes denial of service in TensorFlow via `SparseTensorToCSRSparseMatrix`
Affected: fixed in 2.6.4; from 2.7.0, fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; fixed in 2.6.4; from 2.7.0, fixed in 2.7.2; from 2.8.0, fixed in 2.8.1.
CVE-2022-29199Medium 5.5
Missing validation causes denial of service in TensorFlow via `LoadAndRemapMatrix`
Affected: fixed in 2.6.4; from 2.7.0, fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; fixed in 2.6.4; from 2.7.0, fixed in 2.7.2; from 2.8.0, fixed in 2.8.1.
CVE-2022-29200Medium 5.5
Missing validation causes denial of service in TensorFlow via `LSTMBlockCell`
Affected: fixed in 2.6.4; from 2.7.0, fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; fixed in 2.6.4; from 2.7.0, fixed in 2.7.2; from 2.8.0, fixed in 2.8.1.
CVE-2022-29193Medium 5.5
Missing validation causes `TensorSummaryV2` in TensorFlow to crash
Affected: fixed in 2.6.4; from 2.7.0, fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; fixed in 2.6.4; from 2.7.0, fixed in 2.7.2; from 2.8.0, fixed in 2.8.1.
CVE-2022-29194Medium 5.5
Missing validation causes denial of service via `DeleteSessionTensor` in TensorFlow
Affected: fixed in 2.6.4; from 2.7.0, fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; fixed in 2.6.4; from 2.7.0, fixed in 2.7.2; from 2.8.0, fixed in 2.8.1.
CVE-2022-29191Medium 5.5
Missing validation causes denial of service via `GetSessionTensor` in TensorFlow
Affected: fixed in 2.6.4; from 2.7.0, fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; fixed in 2.6.4; from 2.7.0, fixed in 2.7.2; from 2.8.0, fixed in 2.8.1.
CVE-2022-29192Medium 5.5
Missing validation crashes `QuantizeAndDequantizeV4Grad` in TensorFlow
Affected: fixed in 2.6.4; from 2.7.0, fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; fixed in 2.6.4; from 2.7.0, fixed in 2.7.2; from 2.8.0, fixed in 2.8.1.
CVE-2022-23561High 8.8
Out of bounds write in TFLite
Affected: fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; from 2.7.0, fixed in 2.7.1.
CVE-2022-23557Medium 6.5
Division by zero in TFLite
Affected: fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; from 2.7.0, fixed in 2.7.1; fixed in 2.5.3; from 2.6.0, fixed in 2.6.3.
CVE-2022-23558High 7.6
Integer overflow in TFLite array creation
Affected: fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; from 2.7.0, fixed in 2.7.1.
CVE-2022-23570Medium 6.5
Null-dereference in Tensorflow
Affected: fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; from 2.7.0, fixed in 2.7.1; fixed in 2.5.3; from 2.6.0, fixed in 2.6.3.
CVE-2022-23564Medium 6.5
Reachable Assertion in Tensorflow
Affected: fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; from 2.7.0, fixed in 2.7.1; fixed in 2.5.3; from 2.6.0, fixed in 2.6.3.
CVE-2022-23565Medium 6.5
`CHECK`-failures in Tensorflow
Affected: fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; from 2.7.0, fixed in 2.7.1; fixed in 2.5.3; from 2.6.0, fixed in 2.6.3.
CVE-2022-23562High 7.6
Integer overflow in Tensorflow
Affected: fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; from 2.7.0, fixed in 2.7.1; fixed in 2.5.3; from 2.6.0, fixed in 2.6.3.
CVE-2022-23563High 7.1
Insecure temporary file in Tensorflow
Affected: fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; from 2.7.0, fixed in 2.7.1.
CVE-2022-23559High 8.8
Integer overflow in TFLite
Affected: fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; from 2.7.0, fixed in 2.7.1.
CVE-2022-23560High 8.8
Read and Write outside of bounds in TFLite
Affected: fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; from 2.7.0, fixed in 2.7.1.
CVE-2022-23574High 8.8
Out of bounds read and write in Tensorflow
Affected: fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; from 2.7.0, fixed in 2.7.1.
CVE-2022-23571Medium 6.5
Reachable Assertion in Tensorflow
Affected: fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; from 2.7.0, fixed in 2.7.1; fixed in 2.5.3; from 2.6.0, fixed in 2.6.3.
CVE-2022-23566High 8.8
Out of bounds write in Tensorflow
Affected: fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; from 2.7.0, fixed in 2.7.1.
CVE-2022-23577Medium 6.5
Null-dereference in Tensorflow
Affected: fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; from 2.7.0, fixed in 2.7.1; fixed in 2.5.3; from 2.6.0, fixed in 2.6.3.
CVE-2022-23578Medium 4.3
Memory leak in Tensorflow
Affected: fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; from 2.7.0, fixed in 2.7.1; fixed in 2.5.3; from 2.6.0, fixed in 2.6.3.
CVE-2022-23572Medium 6.5
Crash when type cannot be specialized in Tensorflow
Affected: fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; from 2.7.0, fixed in 2.7.1; fixed in 2.5.3; from 2.6.0, fixed in 2.6.3.
CVE-2022-23573High 7.6
Uninitialized variable access in Tensorflow
Affected: fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; from 2.7.0, fixed in 2.7.1; fixed in 2.5.3; from 2.6.0, fixed in 2.6.3.
CVE-2022-23585Medium 4.3
Memory leak in decoding PNG images in Tensorflow
Affected: fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; from 2.7.0, fixed in 2.7.1; fixed in 2.5.3; from 2.6.0, fixed in 2.6.3.
CVE-2022-23579Medium 6.5
`CHECK`-failures during Grappler's `SafeToRemoveIdentity` in Tensorflow
Affected: fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; from 2.7.0, fixed in 2.7.1; fixed in 2.5.3; from 2.6.0, fixed in 2.6.3.
CVE-2022-23580Medium 6.5
Abort caused by allocating a vector that is too large in Tensorflow
Affected: fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; from 2.7.0, fixed in 2.7.1; fixed in 2.5.3; from 2.6.0, fixed in 2.6.3.
CVE-2022-23581Medium 6.5
`CHECK`-failures during Grappler's `IsSimplifiableReshape` in Tensorflow
Affected: fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; from 2.7.0, fixed in 2.7.1; fixed in 2.5.3; from 2.6.0, fixed in 2.6.3.
CVE-2022-23575Medium 6.5
Integer overflow in Tensorflow
Affected: fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; from 2.7.0, fixed in 2.7.1; fixed in 2.5.3; from 2.6.0, fixed in 2.6.3.
CVE-2022-23576Medium 6.5
Integer overflow in Tensorflow
Affected: fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; from 2.7.0, fixed in 2.7.1.
CVE-2022-23588Medium 6.5
`CHECK`-fails due to attempting to build a reference tensor in Tensorflow
Affected: fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; from 2.7.0, fixed in 2.7.1; fixed in 2.5.3; from 2.6.0, fixed in 2.6.3.
CVE-2022-23589Medium 6.5
Null pointer dereference in Grappler's `IsConstant` in Tensorflow
Affected: fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; from 2.7.0, fixed in 2.7.1.
CVE-2022-23586Medium 6.5
Multiple `CHECK`-fails in `function.cc` in Tensorflow
Affected: fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; from 2.7.0, fixed in 2.7.1; fixed in 2.5.3; from 2.6.0, fixed in 2.6.3.
CVE-2022-23583Medium 6.5
`CHECK`-failures in binary ops in Tensorflow
Affected: fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; from 2.7.0, fixed in 2.7.1.
CVE-2022-23582Medium 6.5
`CHECK`-failures in `TensorByteSize` in Tensorflow
Affected: fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; from 2.7.0, fixed in 2.7.1; fixed in 2.5.3; from 2.6.0, fixed in 2.6.3.
CVE-2022-23584High 7.6
Use after free in `DecodePng` in Tensorflow
Affected: fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; from 2.7.0, fixed in 2.7.1; fixed in 2.5.3; from 2.6.0, fixed in 2.6.3.
CVE-2022-23592High 8.1
Out of bounds read in Tensorflow
Affected: from 2.7.0, fixed in 2.8.0; from 2.8.0-rc0, fixed in 2.8.0.
CVE-2022-23587High 8.8
Integer overflow in Tensorflow
Affected: fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; from 2.7.0, fixed in 2.7.1.
CVE-2022-23595Medium 5.3
Null pointer dereference in TensorFlow
Affected: fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; from 2.7.0, fixed in 2.7.1.
CVE-2022-23594High 8.8
Out of bounds read in Tensorflow
Affected: from 2.7.0, fixed in 2.7.1.
CVE-2022-23590Medium 5.9
Crash due to erroneous `StatusOr` in Tensorflow
Affected: fixed in 2.7.1; fixed in 2.7.1.
CVE-2022-23591High 7.5
Stack overflow in Tensorflow
Affected: fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; from 2.7.0, fixed in 2.7.1; fixed in 2.5.3; from 2.6.0, fixed in 2.6.3.
CVE-2022-23593Medium 5.9
Segfault in `simplifyBroadcast` in Tensorflow
Affected: from 2.8.0-rc0, fixed in 2.8.0; from 2.7.0, fixed in 2.8.0.
CVE-2022-21740High 7.6
Heap overflow in Tensorflow
Affected: fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; from 2.7.0, fixed in 2.7.1.
CVE-2022-21741Medium 6.5
Division by zero in TFLite
Affected: fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; from 2.7.0, fixed in 2.7.1.
CVE-2022-21737Medium 6.5
Assertion failure based denial of service in Tensorflow
Affected: fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; from 2.7.0, fixed in 2.7.1.
CVE-2022-21738Medium 6.5
Integer overflow leading to crash in Tensorflow
Affected: fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; from 2.7.0, fixed in 2.7.1; fixed in 2.5.3; from 2.6.0, fixed in 2.6.3.
CVE-2022-21739Medium 6.5
Null pointer dereference in TensorFlow
Affected: fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; from 2.7.0, fixed in 2.7.1; fixed in 2.5.3; from 2.6.0, fixed in 2.6.3.
CVE-2022-21734Medium 6.5
`CHECK`-failures in Tensorflow
Affected: fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; from 2.7.0, fixed in 2.7.1; fixed in 2.5.3; from 2.6.0, fixed in 2.6.3.
CVE-2022-21735Medium 6.5
Division by zero in Tensorflow
Affected: fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; from 2.7.0, fixed in 2.7.1.
CVE-2022-23569Medium 6.5
`CHECK`-fails when building invalid tensor shapes in Tensorflow
Affected: fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; from 2.7.0, fixed in 2.7.1.
CVE-2022-21729Medium 6.5
Overflow and uncaught divide by zero in Tensorflow
Affected: fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; from 2.7.0, fixed in 2.7.1.
CVE-2022-21725Medium 6.5
Division by zero in Tensorflow
Affected: fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; from 2.7.0, fixed in 2.7.1.
CVE-2022-21736High 7.6
Undefined behavior in Tensorflow
Affected: fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; from 2.7.0, fixed in 2.7.1; fixed in 2.5.3; from 2.6.0, fixed in 2.6.3.
CVE-2022-23567Medium 6.5
Integer overflows in Tensorflow
Affected: fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; from 2.7.0, fixed in 2.7.1; fixed in 2.5.3; from 2.6.0, fixed in 2.6.3.
CVE-2022-23568Medium 6.5
Integer overflows in Tensorflow
Affected: fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; from 2.7.0, fixed in 2.7.1.
CVE-2022-21731Medium 6.5
Type confusion leading to segfault in Tensorflow
Affected: fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; from 2.7.0, fixed in 2.7.1.
CVE-2022-21733Medium 4.3
Memory exhaustion in Tensorflow
Affected: fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; from 2.7.0, fixed in 2.7.1; fixed in 2.5.3; from 2.6.0, fixed in 2.6.3.
CVE-2022-21732Medium 4.3
Memory exhaustion in Tensorflow
Affected: fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; from 2.7.0, fixed in 2.7.1.
CVE-2022-21727High 7.6
Integer overflow in Tensorflow
Affected: fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; from 2.7.0, fixed in 2.7.1; fixed in 2.5.3; from 2.6.0, fixed in 2.6.3.
CVE-2022-21726High 8.1
Out of bounds read in Tensorflow
Affected: fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; from 2.7.0, fixed in 2.7.1.
CVE-2022-21728High 8.1
Out of bounds read in Tensorflow
Affected: fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; from 2.7.0, fixed in 2.7.1.
CVE-2022-21730High 8.1
Out of bounds read in Tensorflow
Affected: fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; from 2.7.0, fixed in 2.7.1.
CVE-2021-41227Medium 6.6
Arbitrary memory read in `ImmutableConst`
Affected: fixed in 2.4.4; from 2.5.0, fixed in 2.5.2; from 2.6.0, fixed in 2.6.1; from 2.7.0rc0, fixed in 2.7.0; from 2.6.0, fixed in 2.6.1; from 2.5.0, fixed in 2.5.2; fixed in 2.4.4.
CVE-2021-41225Medium 5.5
A use of uninitialized value vulnerability in Tensorflow
Affected: from 2.6.0, fixed in 2.6.1; from 2.5.0, fixed in 2.5.2; fixed in 2.4.4; fixed in 2.4.4; from 2.5.0, fixed in 2.5.2; from 2.6.0, fixed in 2.6.1; from 2.7.0rc0, fixed in 2.7.0.
CVE-2021-41222Medium 5.5
Segfault due to negative splits in `SplitV`
Affected: from 2.6.0, fixed in 2.6.1; from 2.5.0, fixed in 2.5.2; fixed in 2.4.4; fixed in 2.4.4; from 2.5.0, fixed in 2.5.2; from 2.6.0, fixed in 2.6.1; from 2.7.0rc0, fixed in 2.7.0.
CVE-2021-41228High 7.5
Code injection in `saved_model_cli`
Affected: fixed in 2.4.4; from 2.5.0, fixed in 2.5.2; from 2.6.0, fixed in 2.6.1; from 2.7.0rc0, fixed in 2.7.0; from 2.5.0, fixed in 2.5.2; fixed in 2.4.4; from 2.6.0, fixed in 2.6.1.
CVE-2021-41220High 7.8
Use after free in `CollectiveReduceV2`
Affected: from 2.6.0, fixed in 2.6.1; from 2.7.0rc0, fixed in 2.7.0; from 2.6.0, fixed in 2.6.1.
CVE-2021-41221High 7.8
Access to invalid memory during shape inference in `Cudnn*` ops
Affected: from 2.6.0, fixed in 2.6.1; from 2.5.0, fixed in 2.5.2; fixed in 2.4.4; fixed in 2.4.4; from 2.5.0, fixed in 2.5.2; from 2.6.0, fixed in 2.6.1; from 2.7.0rc0, fixed in 2.7.0.
CVE-2021-41216Medium 5.5
Heap buffer overflow in `Transpose`
Affected: from 2.6.0, fixed in 2.6.1; from 2.5.0, fixed in 2.5.2; fixed in 2.4.4; fixed in 2.4.4; from 2.5.0, fixed in 2.5.2; from 2.6.0, fixed in 2.6.1; from 2.7.0rc0, fixed in 2.7.0.
CVE-2021-41213Medium 5.5
Deadlock in mutually recursive `tf.function` objects
Affected: fixed in 2.4.4; from 2.5.0, fixed in 2.5.2; from 2.6.0, fixed in 2.6.1; from 2.7.0rc0, fixed in 2.7.0; from 2.6.0, fixed in 2.6.1; from 2.5.0, fixed in 2.5.2; fixed in 2.4.4.
CVE-2021-41218Medium 5.5
Integer division by 0 in `tf.raw_ops.AllToAll`
Affected: fixed in 2.4.4; from 2.5.0, fixed in 2.5.2; from 2.6.0, fixed in 2.6.1; from 2.7.0rc0, fixed in 2.7.0; from 2.6.0, fixed in 2.6.1; from 2.5.0, fixed in 2.5.2; fixed in 2.4.4.
CVE-2021-41206High 7.0
Incomplete validation of shapes in multiple TF ops
Affected: from 2.6.0, fixed in 2.6.1; from 2.5.0, fixed in 2.5.2; fixed in 2.4.4; fixed in 2.4.4; from 2.5.0, fixed in 2.5.2; from 2.6.0, fixed in 2.6.1.
CVE-2021-41208High 8.8
Incomplete validation in boosted trees code
Affected: fixed in 2.4.4; from 2.5.0, fixed in 2.5.2; from 2.6.0, fixed in 2.6.1; from 2.7.0rc0, fixed in 2.7.0; from 2.6.0, fixed in 2.6.1; from 2.5.0, fixed in 2.5.2; fixed in 2.4.4.
CVE-2021-41207Medium 5.5
Division by zero in `ParallelConcat`
Affected: fixed in 2.4.4; from 2.5.0, fixed in 2.5.2; from 2.6.0, fixed in 2.6.1; fixed in 2.4.4; from 2.5.0, fixed in 2.5.2; from 2.6.0, fixed in 2.6.1; from 2.7.0rc0, fixed in 2.7.0.
CVE-2021-41202Medium 5.5
Overflow/crash in `tf.range`
Affected: from 2.6.0, fixed in 2.6.1; from 2.5.0, fixed in 2.5.2; fixed in 2.4.4; fixed in 2.4.4; from 2.5.0, fixed in 2.5.2; from 2.6.0, fixed in 2.6.1; from 2.7.0rc0, fixed in 2.7.0.
CVE-2021-41209Medium 5.5
FPE in convolutions with zero size filters
Affected: fixed in 2.4.4; from 2.5.0, fixed in 2.5.2; from 2.6.0, fixed in 2.6.1; from 2.7.0rc0, fixed in 2.7.0; from 2.6.0, fixed in 2.6.1; from 2.5.0, fixed in 2.5.2; fixed in 2.4.4.
CVE-2021-41203High 7.8
Missing validation during checkpoint loading
Affected: from 2.6.0, fixed in 2.6.1; from 2.5.0, fixed in 2.5.2; fixed in 2.4.4; fixed in 2.4.4; from 2.5.0, fixed in 2.5.2; from 2.6.0, fixed in 2.6.1; from 2.7.0rc0, fixed in 2.7.0.
CVE-2021-41215Medium 5.5
Null pointer exception in `DeserializeSparse`
Affected: from 2.6.0, fixed in 2.6.1; from 2.5.0, fixed in 2.5.2; fixed in 2.4.4; fixed in 2.4.4; from 2.5.0, fixed in 2.5.2; from 2.6.0, fixed in 2.6.1; from 2.7.0rc0, fixed in 2.7.0.
CVE-2021-41217Medium 5.5
Null pointer exception when `Exit` node is not preceded by `Enter` op
Affected: from 2.6.0, fixed in 2.6.1; from 2.5.0, fixed in 2.5.2; fixed in 2.4.4; fixed in 2.4.4; from 2.5.0, fixed in 2.5.2; from 2.6.0, fixed in 2.6.1; from 2.7.0rc0, fixed in 2.7.0.
CVE-2021-41219High 7.8
Undefined behavior via `nullptr` reference binding in sparse matrix multiplication
Affected: from 2.6.0, fixed in 2.6.1; from 2.5.0, fixed in 2.5.2; fixed in 2.4.4; fixed in 2.4.4; from 2.5.0, fixed in 2.5.2; from 2.6.0, fixed in 2.6.1; from 2.7.0rc0, fixed in 2.7.0.
CVE-2021-41214High 7.8
Reference binding to `nullptr` in `tf.ragged.cross`
Affected: fixed in 2.4.4; from 2.5.0, fixed in 2.5.2; from 2.6.0, fixed in 2.6.1; from 2.7.0rc0, fixed in 2.7.0; from 2.6.0, fixed in 2.6.1; from 2.5.0, fixed in 2.5.2; fixed in 2.4.4.
CVE-2021-41204Medium 5.5
Segfault while copying constant resource tensor
Affected: from 2.6.0, fixed in 2.6.1; from 2.5.0, fixed in 2.5.2; fixed in 2.4.4; fixed in 2.4.4; from 2.5.0, fixed in 2.5.2; from 2.6.0, fixed in 2.6.1; from 2.7.0rc0, fixed in 2.7.0.
CVE-2021-41226High 7.1
Heap OOB read in `SparseBinCount`
Affected: from 2.6.0, fixed in 2.6.1; from 2.5.0, fixed in 2.5.2; fixed in 2.4.4; fixed in 2.4.4; from 2.5.0, fixed in 2.5.2; from 2.6.0, fixed in 2.6.1; from 2.7.0rc0, fixed in 2.7.0.
CVE-2021-41223High 7.1
Heap OOB read in `FusedBatchNorm` kernels
Affected: fixed in 2.4.4; from 2.5.0, fixed in 2.5.2; from 2.6.0, fixed in 2.6.1; from 2.7.0rc0, fixed in 2.7.0; from 2.6.0, fixed in 2.6.1; from 2.5.0, fixed in 2.5.2; fixed in 2.4.4.
CVE-2021-41224High 7.1
`SparseFillEmptyRows` heap OOB read
Affected: fixed in 2.4.4; from 2.5.0, fixed in 2.5.2; from 2.6.0, fixed in 2.6.1; from 2.7.0rc0, fixed in 2.7.0; from 2.6.0, fixed in 2.6.1; from 2.5.0, fixed in 2.5.2; fixed in 2.4.4.
CVE-2021-41212High 7.1
Heap OOB read in `tf.ragged.cross`
Affected: from 2.6.0, fixed in 2.6.1; from 2.5.0, fixed in 2.5.2; fixed in 2.4.4; fixed in 2.4.4; from 2.5.0, fixed in 2.5.2; from 2.6.0, fixed in 2.6.1; from 2.7.0rc0, fixed in 2.7.0.
CVE-2021-41211High 7.1
Heap OOB read in shape inference for `QuantizeV2`
Affected: from 2.6.0, fixed in 2.6.1; from 2.7.0rc0, fixed in 2.7.0; from 2.6.0, fixed in 2.6.1.
CVE-2021-41205High 7.1
Heap OOB read in all `tf.raw_ops.QuantizeAndDequantizeV*` ops
Affected: fixed in 2.4.4; from 2.5.0, fixed in 2.5.2; from 2.6.0, fixed in 2.6.1; from 2.7.0rc0, fixed in 2.7.0; from 2.6.0, fixed in 2.6.1; from 2.5.0, fixed in 2.5.2; fixed in 2.4.4.
CVE-2021-41210High 7.1
Heap OOB read in `tf.raw_ops.SparseCountSparseOutput`
Affected: fixed in 2.4.4; from 2.5.0, fixed in 2.5.2; from 2.6.0, fixed in 2.6.1; from 2.7.0rc0, fixed in 2.7.0; from 2.6.0, fixed in 2.6.1; from 2.5.0, fixed in 2.5.2; fixed in 2.4.4.
CVE-2021-41201High 7.8
Unitialized access in `EinsumHelper::ParseEquation`
Affected: fixed in 2.4.4; from 2.5.0, fixed in 2.5.2; from 2.6.0, fixed in 2.6.1; from 2.7.0rc0, fixed in 2.7.0; from 2.6.0, fixed in 2.6.1; from 2.5.0, fixed in 2.5.2; fixed in 2.4.4.
CVE-2021-41200Medium 5.5
Incomplete validation in `tf.summary.create_file_writer`
Affected: from 2.6.0, fixed in 2.6.1; from 2.5.0, fixed in 2.5.2; fixed in 2.4.4; fixed in 2.4.4; from 2.5.0, fixed in 2.5.2; from 2.6.0, fixed in 2.6.1; from 2.7.0rc0, fixed in 2.7.0.
CVE-2021-41197Medium 5.5
Crashes due to overflow and `CHECK`-fail in ops with large tensor shapes
Affected: from 2.6.0, fixed in 2.6.1; from 2.5.0, fixed in 2.5.2; fixed in 2.4.4; fixed in 2.4.4; from 2.5.0, fixed in 2.5.2; from 2.6.0, fixed in 2.6.1; from 2.7.0rc0, fixed in 2.7.0.
CVE-2021-41198Medium 5.5
Overflow/crash in `tf.tile` when tiling tensor is large
Affected: from 2.6.0, fixed in 2.6.1; from 2.5.0, fixed in 2.5.2; fixed in 2.4.4; fixed in 2.4.4; from 2.5.0, fixed in 2.5.2; from 2.6.0, fixed in 2.6.1; from 2.7.0rc0, fixed in 2.7.0.
CVE-2021-41199Medium 5.5
Overflow/crash in `tf.image.resize` when size is large
Affected: from 2.6.0, fixed in 2.6.1; from 2.5.0, fixed in 2.5.2; fixed in 2.4.4; fixed in 2.4.4; from 2.5.0, fixed in 2.5.2; from 2.6.0, fixed in 2.6.1; from 2.7.0rc0, fixed in 2.7.0.
CVE-2021-41196Medium 5.5
Crash in `max_pool3d` when size argument is 0 or negative
Affected: fixed in 2.4.4; from 2.5.0, fixed in 2.5.2; from 2.6.0, fixed in 2.6.1; from 2.7.0rc0, fixed in 2.7.0; from 2.6.0, fixed in 2.6.1; from 2.5.0, fixed in 2.5.2; fixed in 2.4.4.
CVE-2021-41195Medium 5.5
Crash in `tf.math.segment_*` operations
Affected: from 2.6.0, fixed in 2.6.1; from 2.5.0, fixed in 2.5.2; fixed in 2.4.4; fixed in 2.4.4; from 2.5.0, fixed in 2.5.2; from 2.6.0, fixed in 2.6.1.
CVE-2021-37690Medium 6.6
Use after free and segfault in shape inference functions in TensorFlow
Affected: fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; from 2.5.0, fixed in 2.5.1; from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3.
CVE-2021-37678Critical 9.3
Arbitrary code execution due to YAML deserialization
Affected: from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; from 2.5.0, fixed in 2.5.1.
CVE-2021-37692Medium 5.5
Segfault on strings tensors with mistmatched dimensions in TensorFlow
Affected: from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; from 2.5.0rc0, fixed in 2.5.1.
CVE-2021-37669Medium 5.5
Crash in NMS ops caused by integer conversion to unsigned in TensorFlow
Affected: fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; from 2.5.0, fixed in 2.5.1; from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3.
CVE-2021-37673Medium 5.5
`CHECK`-fail in `MapStage` in TensorFlow
Affected: fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; from 2.5.0, fixed in 2.5.1; from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3.
CVE-2021-37663High 7.8
Incomplete validation in `QuantizeV2` in TensorFlow
Affected: from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; from 2.5.0, fixed in 2.5.1.
CVE-2021-37682Medium 4.4
Use of unitialized value in TensorFlow Lite
Affected: fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; from 2.5.0, fixed in 2.5.1; from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3.
CVE-2021-37674Medium 5.5
Incomplete validation in `MaxPoolGrad` in TensorFlow
Affected: from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; from 2.5.0, fixed in 2.5.1.
CVE-2021-37665High 7.8
Incomplete validation in MKL requantization in TensorFlow
Affected: fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; from 2.5.0, fixed in 2.5.1; from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3.
CVE-2021-37677Medium 5.5
Missing validation in shape inference for `Dequantize` in TensorFlow
Affected: from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; from 2.5.0, fixed in 2.5.1.
CVE-2021-37683Medium 5.5
Division by zero in TensorFlow Lite division operations
Affected: from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; from 2.5.0, fixed in 2.5.1.
CVE-2021-37684Medium 5.5
Division by zero in TensorFlow Lite pooling operations
Affected: from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; from 2.5.0, fixed in 2.5.1.
CVE-2021-37668Medium 5.5
Division by zero in TensorFlow Lite `tf.raw_ops.UnravelIndex`
Affected: from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; from 2.5.0, fixed in 2.5.1.
CVE-2021-37670Medium 5.5
Heap OOB in `UpperBound` and `LowerBound` in TensorFlow
Affected: fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; from 2.5.0, fixed in 2.5.1; from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3.
CVE-2021-37691Medium 5.5
Division by zero in LSH in TensorFlow Lite
Affected: from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; from 2.5.0, fixed in 2.5.1.
CVE-2021-37679High 7.1
Heap OOB in nested `tf.map_fn` with `RaggedTensor`s in TensorFlow
Affected: fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; from 2.5.0, fixed in 2.5.1; from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3.
CVE-2021-37672Medium 5.5
Heap OOB in `SdcaOptimizerV2` in TensorFlow
Affected: fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; from 2.5.0, fixed in 2.5.1; from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3.
CVE-2021-37687Medium 5.5
Heap OOB in TensorFlow Lite's `Gather*` implementations
Affected: from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; from 2.5.0, fixed in 2.5.1.
CVE-2021-37685Medium 5.5
Heap OOB in TensorFlow Lite
Affected: fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; from 2.5.0, fixed in 2.5.1; from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3.
CVE-2021-37681High 7.8
Null pointer exception in TensorFlow Lite
Affected: fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; from 2.5.0, fixed in 2.5.1; from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3.
CVE-2021-37689High 7.8
Null pointer dereference in TensorFlow Lite MLIR optimizations
Affected: from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; from 2.5.0, fixed in 2.5.1.
CVE-2021-37688High 7.8
Null pointer dereference in TensorFlow Lite
Affected: from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; from 2.5.0, fixed in 2.5.1; from 2.4.0, fixed in 2.4.3; fixed in 2.3.4.
CVE-2021-37686Medium 5.5
Infinite loop in TensorFlow Lite
Affected: from 2.6.0rc0, fixed in 2.6.0rc2; from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3.
CVE-2021-37680Medium 5.5
Division by zero in TFLite in TensorFlow
Affected: fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; from 2.5.0, fixed in 2.5.1; from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3.
CVE-2021-37675Medium 5.5
Division by 0 in most convolution operators in TensorFlow
Affected: fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; from 2.5.0, fixed in 2.5.1; from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3.
CVE-2021-37676High 7.8
Reference binding to nullptr in shape inference in TensorFlow
Affected: from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; from 2.5.0, fixed in 2.5.1.
CVE-2021-37671High 7.8
Reference binding to nullptr in map operations in TensorFlow
Affected: from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; from 2.5.0, fixed in 2.5.1.
CVE-2021-37666High 7.8
Reference binding to nullptr in `RaggedTensorToVariant` in TensorFlow
Affected: fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; from 2.5.0, fixed in 2.5.1; from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3.
CVE-2021-37667High 7.8
Reference binding to nullptr in unicode encoding in TensorFlow
Affected: fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; from 2.5.0, fixed in 2.5.1; from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3.
CVE-2021-37648High 7.8
Incorrect validation of `SaveV2` inputs in TensorFlow
Affected: from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; from 2.5.0, fixed in 2.5.1.
CVE-2021-37652High 7.8
Use after free in boosted trees creation in TensorFlow
Affected: from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; from 2.5.0, fixed in 2.5.1.
CVE-2021-37646Medium 5.5
Bad alloc in `StringNGrams` caused by integer conversion in TensorFlow
Affected: from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; from 2.5.0, fixed in 2.5.1.
CVE-2021-37661Medium 5.5
Crash caused by integer conversion to unsigned in TensorFlow
Affected: fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; from 2.5.0, fixed in 2.5.1; from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3.
CVE-2021-37645Medium 5.5
Integer overflow due to conversion to unsigned in TensorFlow
Affected: fixed in 2.4.3; from 2.5.0, fixed in 2.5.1; from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3.
CVE-2021-37651High 7.1
Heap buffer overflow in `FractionalAvgPoolGrad` in TensorFlow
Affected: fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; from 2.5.0, fixed in 2.5.1; from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3.
CVE-2021-37650High 7.8
Segfault and heap buffer overflow in `{Experimental,}DatasetToTFRecord` in TensorFlow
Affected: from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; from 2.5.0, fixed in 2.5.1.
CVE-2021-37662High 7.1
Reference binding to nullptr in boosted trees in TensorFlow
Affected: fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; from 2.5.0, fixed in 2.5.1; from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3.
CVE-2021-37656High 7.1
Reference binding to nullptr in `RaggedTensorToSparse` in TensorFlow
Affected: fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; from 2.5.0, fixed in 2.5.1; from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3.
CVE-2021-37657High 7.1
Reference binding to nullptr in `MatrixDiagV*` ops in TensorFlow
Affected: from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; from 2.5.0, fixed in 2.5.1.
CVE-2021-37658High 7.1
Reference binding to nullptr in `MatrixSetDiagV*` ops in TensorFlow
Affected: from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; from 2.5.0, fixed in 2.5.1.
CVE-2021-37644Medium 5.5
`std::abort` raised from `TensorListReserve` in TensorFlow
Affected: fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; from 2.5.0, fixed in 2.5.1; from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3.
CVE-2021-37654High 7.3
Heap OOB and CHECK fail in `ResourceGather` in TensorFlow
Affected: fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; from 2.5.0, fixed in 2.5.1; from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3.
CVE-2021-37641High 7.3
Heap OOB in `RaggedGather` in TensorFlow
Affected: from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; from 2.5.0, fixed in 2.5.1.
CVE-2021-37635High 7.3
Heap out of bounds access in sparse reduction operations in TensorFlow
Affected: fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; from 2.5.0, fixed in 2.5.1; from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3.
CVE-2021-37664High 7.3
Heap OOB in boosted trees in TensorFlow
Affected: from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; from 2.5.0, fixed in 2.5.1.
CVE-2021-37659High 7.3
Out of bounds read via null pointer dereference in TensorFlow
Affected: fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; from 2.5.0, fixed in 2.5.1; from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3.
CVE-2021-37655High 7.3
Heap OOB in `ResourceScatterUpdate` in TensorFlow
Affected: fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; from 2.5.0, fixed in 2.5.1; from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3.
CVE-2021-37637High 7.7
Null pointer dereference in `CompressElement` in TensorFlow
Affected: fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; from 2.5.0, fixed in 2.5.1; from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3.
CVE-2021-37649High 7.7
Null pointer dereference in `UncompressElement` in TensorFlow
Affected: fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; from 2.5.0, fixed in 2.5.1; from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3.
CVE-2021-37647High 7.7
Null pointer dereference in `SparseTensorSliceDataset` in TensorFlow
Affected: from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; from 2.5.0, fixed in 2.5.1.
CVE-2021-37643High 7.7
Null pointer dereference in `MatrixDiagPartOp` in TensorFlow
Affected: from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; from 2.5.0, fixed in 2.5.1.
CVE-2021-37639High 8.4
Null pointer dereference and heap OOB read in TensorFlow
Affected: from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; from 2.5.0, fixed in 2.5.1.
CVE-2021-37638High 7.7
Null pointer dereference in `RaggedTensorToTensor` in TensorFlow
Affected: from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; from 2.5.0, fixed in 2.5.1.
CVE-2021-37660Medium 5.5
Division by 0 in inplace operations in TensorFlow
Affected: from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; from 2.5.0, fixed in 2.5.1.
CVE-2021-37653Medium 5.5
Division by 0 in `ResourceGather` in TensorFlow
Affected: from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; from 2.5.0, fixed in 2.5.1.
CVE-2021-37642Medium 5.5
Division by 0 in `ResourceScatterDiv` in TensorFlow
Affected: from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; from 2.5.0, fixed in 2.5.1.
CVE-2021-37640Medium 5.5
Integer division by 0 in sparse reshaping in TensorFlow
Affected: fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; from 2.5.0, fixed in 2.5.1; from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3.
CVE-2021-37636Medium 5.5
Floating point exception in `SparseDenseCwiseDiv` in TensorFlow
Affected: fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; from 2.5.0, fixed in 2.5.1; from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3.
CVE-2021-29513Low 2.5
Type confusion during tensor casts lead to dereferencing null pointers
Affected: fixed in 2.2.0rc0; from 2.2.0, fixed in 2.3.0rc0; from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2.
CVE-2021-29514Low 2.5
Heap out of bounds write in `RaggedBinCount`
Affected: from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2; fixed in 2.2.0rc0; from 2.2.0, fixed in 2.3.0rc0; from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3.
CVE-2021-29515Low 2.5
Reference binding to null pointer in `MatrixDiag*` ops
Affected: fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2; fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2.
CVE-2021-29516Low 2.5
Null pointer dereference via invalid Ragged Tensors
Affected: fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2; fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2.
CVE-2021-29517Low 2.5
Division by zero in `Conv3D`
Affected: fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2; fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2.
CVE-2021-29518Low 2.5
Session operations in eager mode lead to null pointer dereferences
Affected: fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2; fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2.
CVE-2021-29519Low 2.5
CHECK-fail in SparseCross due to type confusion
Affected: fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2; fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2.
CVE-2021-29520Low 2.5
Heap buffer overflow in `Conv3DBackprop*`
Affected: fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2; fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2.
CVE-2021-29521Low 2.5
Segfault in SparseCountSparseOutput
Affected: from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2.
CVE-2021-29522Low 2.5
Division by 0 in `Conv3DBackprop*`
Affected: fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2; fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2.
CVE-2021-29523Low 2.5
CHECK-fail in AddManySparseToTensorsMap
Affected: fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2; fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2.
CVE-2021-29524Low 2.5
Division by 0 in `Conv2DBackpropFilter`
Affected: fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2; fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2.
CVE-2021-29585Low 2.5
Division by zero in padding computation in TFLite
Affected: fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2; fixed in 2.2.0rc0; from 2.2.0, fixed in 2.3.0rc0; from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3.
CVE-2021-29586Low 2.5
Division by zero in optimized pooling implementations in TFLite
Affected: fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2; fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2.
CVE-2021-29615Low 2.5
Stack overflow in `ParseAttrValue` with nested tensors
Affected: fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2; fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2.
CVE-2021-29616Low 2.5
Null dereference in Grappler's `TrySimplify`
Affected: fixed in 2.2.0rc0; from 2.2.0, fixed in 2.3.0rc0; from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2.
CVE-2021-29617Low 2.5
Crash in `tf.strings.substr` due to `CHECK`-fail
Affected: fixed in 2.2.0rc0; from 2.2.0, fixed in 2.3.0rc0; from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2.
CVE-2021-29618Low 2.5
Crash in `tf.transpose` with complex inputs
Affected: fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2; fixed in 2.2.0rc0; from 2.2.0, fixed in 2.3.0rc0; from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3.
CVE-2021-29619Low 2.5
Segfault in `tf.raw_ops.SparseCountSparseOutput`
Affected: fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2; fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2.
CVE-2021-29587Low 2.5
Division by zero in TFLite's implementation of `SpaceToDepth`
Affected: fixed in 2.2.0rc0; from 2.2.0, fixed in 2.3.0rc0; from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2.
CVE-2021-29588Low 2.5
Division by zero in TFLite's implementation of `TransposeConv`
Affected: fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2; fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2.
CVE-2021-29589Low 2.5
Division by zero in TFLite's implementation of `GatherNd`
Affected: fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2; fixed in 2.2.0rc0; from 2.2.0, fixed in 2.3.0rc0; from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3.
CVE-2021-29590Low 2.5
Heap OOB read in TFLite's implementation of `Minimum` or `Maximum`
Affected: fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2; fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2.
CVE-2021-29591High 7.3
Stack overflow due to looping TFLite subgraph
Affected: fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2; fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2.
CVE-2021-29592Medium 4.4
Null pointer dereference in TFLite's `Reshape` operator
Affected: fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2; fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2.
CVE-2021-29593Low 2.5
Division by zero in TFLite's implementation of `BatchToSpaceNd`
Affected: fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2; fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2.
CVE-2021-29594Low 2.5
Division by zero in TFLite's convolution code
Affected: fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2; fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2.
CVE-2021-29595Low 2.5
Division by zero in TFLite's implementation of `DepthToSpace`
Affected: fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2; fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3.
CVE-2021-29596Low 2.5
Division by zero in TFLite's implementation of `EmbeddingLookup`
Affected: fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2; fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2.
CVE-2021-29597Low 2.5
Division by zero in TFLite's implementation of `SpaceToBatchNd`
Affected: fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2; fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2.
CVE-2021-29598Low 2.5
Division by zero in TFLite's implementation of `SVDF`
Affected: fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2; fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2.
CVE-2021-29599Low 2.5
Division by zero in TFLite's implementation of `Split`
Affected: fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2; fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2.
CVE-2021-29600Low 2.5
Division by zero in TFLite's implementation of `OneHot`
Affected: fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2; fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2.
CVE-2021-29601Medium 6.3
Integer overflow in TFLite concatentation
Affected: fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2; fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2.
CVE-2021-29602Low 2.5
Division by zero in TFLite's implementation of `DepthwiseConv`
Affected: fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2; fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2.
CVE-2021-29603Low 2.5
Heap OOB write in TFLite
Affected: fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2; fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2.
CVE-2021-29604Low 2.5
Division by zero in TFLite's implementation of hashtable lookup
Affected: fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2; fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2.
CVE-2021-29605High 7.1
Integer overflow in TFLite memory allocation
Affected: fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2; fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2.
CVE-2021-29606High 7.1
Heap OOB read in TFLite
Affected: fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2; fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2.
CVE-2021-29607Medium 5.3
Incomplete validation in `SparseSparseMinimum`
Affected: fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2; fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2.
CVE-2021-29608Medium 5.3
Heap OOB and null pointer dereference in `RaggedTensorToTensor`
Affected: fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2; fixed in 2.2.0rc0; from 2.2.0, fixed in 2.3.0rc0; from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3.
CVE-2021-29609Medium 5.3
Incomplete validation in `SparseAdd`
Affected: fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2; fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2.
CVE-2021-29610Low 3.6
Invalid validation in `QuantizeAndDequantizeV2`
Affected: fixed in 2.2.0rc0; from 2.2.0, fixed in 2.3.0rc0; from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2.
CVE-2021-29611Low 3.6
Incomplete validation in `SparseReshape`
Affected: from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2; fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2.
CVE-2021-29612Low 3.6
Heap buffer overflow in `BandedTriangularSolve`
Affected: fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2; fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2.
CVE-2021-29613Medium 6.3
Incomplete validation in `tf.raw_ops.CTCLoss`
Affected: fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2; fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2.
CVE-2021-29614High 7.1
Interpreter crash from `tf.io.decode_raw`
Affected: fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2; fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2.
CVE-2021-29555Low 2.5
Division by 0 in `FusedBatchNorm`
Affected: fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2; fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2.
CVE-2021-29556Low 2.5
Division by 0 in `Reverse`
Affected: fixed in 2.2.0rc0; from 2.2.0, fixed in 2.3.0rc0; from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2.
CVE-2021-29557Low 2.5
Division by 0 in `SparseMatMul`
Affected: fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2; fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2.
CVE-2021-29558Low 2.5
Heap buffer overflow in `SparseSplit`
Affected: fixed in 2.1.4; from 2.2.0, fixed in 2.3.0rc0; from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2.
CVE-2021-29559Low 2.5
Heap OOB access in unicode ops
Affected: fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2; fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2.
CVE-2021-29560Low 2.5
Heap buffer overflow in `RaggedTensorToTensor`
Affected: fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2; fixed in 2.2.0rc0; from 2.2.0, fixed in 2.3.0rc0; from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3.
CVE-2021-29561Low 2.5
CHECK-fail in `LoadAndRemapMatrix`
Affected: fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2; fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2.
CVE-2021-29562Low 2.5
CHECK-fail in `tf.raw_ops.IRFFT`
Affected: fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2; fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2.
CVE-2021-29563Low 2.5
CHECK-fail in `tf.raw_ops.RFFT`
Affected: fixed in 2.2.0rc0; from 2.2.0, fixed in 2.3.0rc0; from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2.
CVE-2021-29564Low 2.5
Null pointer dereference in `EditDistance`
Affected: fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2; fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2.
CVE-2021-29565Low 2.5
Null pointer dereference in `SparseFillEmptyRows`
Affected: fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2; fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2.
CVE-2021-29566Low 2.5
Heap OOB access in `Dilation2DBackpropInput`
Affected: fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2; fixed in 2.2.0rc0; from 2.2.0, fixed in 2.3.0rc0; from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3.
CVE-2021-29567Low 2.5
Lack of validation in `SparseDenseCwiseMul`
Affected: fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2; fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2.
CVE-2021-29568Low 2.5
Reference binding to null in `ParameterizedTruncatedNormal`
Affected: fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2; fixed in 2.2.0rc0; from 2.2.0, fixed in 2.3.0rc0; from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3.
CVE-2021-29569Low 2.5
Heap out of bounds read in `RequantizationRange`
Affected: fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2; fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2.
CVE-2021-29570Low 2.5
Heap out of bounds read in `MaxPoolGradWithArgmax`
Affected: fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2; fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2.
CVE-2021-29571Medium 4.5
Memory corruption in `DrawBoundingBoxesV2`
Affected: fixed in 2.2.0rc0; from 2.2.0, fixed in 2.3.0rc0; from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2.
CVE-2021-29572Low 2.5
Reference binding to nullptr in `SdcaOptimizer`
Affected: fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2; fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2.
CVE-2021-29573Low 2.5
Division by 0 in `MaxPoolGradWithArgmax`
Affected: fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2; fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2.
CVE-2021-29574Low 2.5
Undefined behavior in `MaxPool3DGradGrad`
Affected: fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2; fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2.
CVE-2021-29575Low 2.5
Overflow/denial of service in `tf.raw_ops.ReverseSequence`
Affected: fixed in 2.2.0rc0; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2; fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2.
CVE-2021-29576Low 2.5
Heap buffer overflow in `MaxPool3DGradGrad`
Affected: fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2; fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2.
CVE-2021-29577Low 2.5
Heap buffer overflow in `AvgPool3DGrad`
Affected: fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2; fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2.
CVE-2021-29578Low 2.5
Heap buffer overflow in `FractionalAvgPoolGrad`
Affected: fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2; fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2.
CVE-2021-29579Low 2.5
Heap buffer overflow in `MaxPoolGrad`
Affected: fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2; fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2.
CVE-2021-29580Low 2.5
Undefined behavior and `CHECK`-fail in `FractionalMaxPoolGrad`
Affected: fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2; fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2.
CVE-2021-29581Low 2.5
Segfault in `CTCBeamSearchDecoder`
Affected: fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2; fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2.
CVE-2021-29582Low 2.5
Heap OOB read in `tf.raw_ops.Dequantize`
Affected: fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2; fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2.
CVE-2021-29583Low 2.5
Heap buffer overflow and undefined behavior in `FusedBatchNorm`
Affected: fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2; fixed in 2.2.0rc0; from 2.2.0, fixed in 2.3.0rc0; from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3.
CVE-2021-29584Low 2.5
CHECK-fail due to integer overflow
Affected: fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2; fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2.
CVE-2021-29525Low 2.5
Division by 0 in `Conv2DBackpropInput`
Affected: fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2; fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2.
CVE-2021-29526Low 2.5
Division by 0 in `Conv2D`
Affected: fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2; fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2.
CVE-2021-29527Low 2.5
Division by 0 in `QuantizedConv2D`
Affected: fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2; fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2.
CVE-2021-29528Low 2.5
Division by 0 in `QuantizedMul`
Affected: fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2; fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2.
CVE-2021-29529Low 2.5
Heap buffer overflow caused by rounding
Affected: fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2; fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2.
CVE-2021-29530Low 2.5
Invalid validation in `SparseMatrixSparseCholesky`
Affected: fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2; fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2.
CVE-2021-29531Low 2.5
CHECK-fail in tf.raw_ops.EncodePng
Affected: fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2; fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2.
CVE-2021-29532Low 2.5
Heap out of bounds read in `RaggedCross`
Affected: fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2; fixed in 2.2.0rc0; from 2.2.0, fixed in 2.3.0rc0; from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3.
CVE-2021-29533Low 2.5
CHECK-fail in DrawBoundingBoxes
Affected: fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2; fixed in 2.2.0rc0; from 2.2.0, fixed in 2.3.0rc0; from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3.
CVE-2021-29534Low 2.5
CHECK-fail in SparseConcat
Affected: fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2; fixed in 2.2.0rc0; from 2.2.0, fixed in 2.3.0rc0; from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3.
CVE-2021-29535Low 2.5
Heap buffer overflow in `QuantizedMul`
Affected: fixed in 2.2.0rc0; from 2.2.0, fixed in 2.3.0rc0; from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2.
CVE-2021-29536Low 2.5
Heap buffer overflow in `QuantizedReshape`
Affected: fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2; fixed in 2.2.0rc0; from 2.2.0, fixed in 2.3.0rc0; from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3.
CVE-2021-29537Low 2.5
Heap buffer overflow in `QuantizedResizeBilinear`
Affected: fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2; fixed in 2.2.0rc0; from 2.2.0, fixed in 2.3.0rc0; from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3.
CVE-2021-29538Low 2.5
Division by zero in `Conv2DBackpropFilter`
Affected: fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2; fixed in 2.2.0rc0; from 2.2.0, fixed in 2.3.0rc0; from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3.
CVE-2021-29539Low 2.5
Segfault in tf.raw_ops.ImmutableConst
Affected: fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2; fixed in 2.2.0rc0; from 2.2.0, fixed in 2.3.0rc0; from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3.
CVE-2021-29540Low 2.5
Heap buffer overflow in `Conv2DBackpropFilter`
Affected: fixed in 2.2.0rc0; from 2.2.0, fixed in 2.3.0rc0; from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2.
CVE-2021-29541Low 2.5
Null pointer dereference in `StringNGrams`
Affected: fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2; fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2.
CVE-2021-29542Low 2.5
Heap buffer overflow in `StringNGrams`
Affected: fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2; fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2.
CVE-2021-29543Low 2.5
CHECK-fail in `CTCGreedyDecoder`
Affected: fixed in 2.2.0rc0; from 2.2.0, fixed in 2.3.0rc0; from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2.
CVE-2021-29544Low 2.5
CHECK-fail in `QuantizeAndDequantizeV4Grad`
Affected: fixed in 2.2.0rc0; from 2.2.0, fixed in 2.3.0rc0; from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; from 2.4.0, fixed in 2.4.2.
CVE-2021-29545Low 2.5
Heap buffer overflow in `SparseTensorToCSRSparseMatrix`
Affected: fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2; fixed in 2.2.0rc0; from 2.2.0, fixed in 2.3.0rc0; from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3.
CVE-2021-29546Low 2.5
Division by 0 in `QuantizedBiasAdd`
Affected: fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2; fixed in 2.2.0rc0; from 2.2.0, fixed in 2.3.0rc0; from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3.
CVE-2021-29547Low 2.5
Heap out of bounds in `QuantizedBatchNormWithGlobalNormalization`
Affected: fixed in 2.2.0rc0; from 2.2.0, fixed in 2.3.0rc0; from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2.
CVE-2021-29548Low 2.5
Division by 0 in `QuantizedBatchNormWithGlobalNormalization`
Affected: fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2; fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2.
CVE-2021-29549Low 2.5
Division by 0 in `QuantizedAdd`
Affected: fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2; fixed in 2.2.0rc0; from 2.2.0, fixed in 2.3.0rc0; from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3.
CVE-2021-29550Low 2.5
Division by 0 in `FractionalAvgPool`
Affected: fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2; fixed in 2.2.0rc0; from 2.2.0, fixed in 2.3.0rc0; from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3.
CVE-2021-29551Low 2.5
OOB read in `MatrixTriangularSolve`
Affected: fixed in 2.2.0rc0; from 2.2.0, fixed in 2.3.0rc0; from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2.
CVE-2021-29552Low 2.5
CHECK-failure in `UnsortedSegmentJoin`
Affected: fixed in 2.2.0rc0; from 2.2.0, fixed in 2.3.0rc0; from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2.
CVE-2021-29553Low 2.5
Heap OOB in `QuantizeAndDequantizeV3`
Affected: fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2; fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2.
CVE-2021-29554Low 2.5
Division by 0 in `DenseCountSparseOutput`
Affected: from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2; fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2.
CVE-2021-29512Low 2.5
Heap buffer overflow in `RaggedBinCount`
Affected: from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2.
CVE-2020-26266Medium 4.4
Uninitialized memory access in Eigen types in TensorFlow
Affected: fixed in 1.15.5; from 2.0.0, fixed in 2.0.4; from 2.1.0, fixed in 2.1.3; from 2.2.0, fixed in 2.2.2; from 2.3.0, fixed in 2.3.2; fixed in 1.15.5; from 2.0.0, fixed in 2.0.4; from 2.1.0, fixed in 2.1.3; from 2.2.0, fixed in 2.2.2; from 2.3.0, fixed in 2.3.2.
CVE-2020-26267Medium 4.4
Lack of validation in data format attributes in TensorFlow
Affected: fixed in 1.15.5; from 2.0.0, fixed in 2.0.4; from 2.1.0, fixed in 2.1.3; from 2.2.0, fixed in 2.2.2; from 2.3.0, fixed in 2.3.2; fixed in 1.15.5; from 2.0.0, fixed in 2.0.4; from 2.1.0, fixed in 2.1.3; from 2.2.0, fixed in 2.2.2; from 2.3.0, fixed in 2.3.2.
CVE-2020-26268Medium 4.4
Write to immutable memory region in TensorFlow
Affected: fixed in 1.15.5; from 2.0.0, fixed in 2.0.4; from 2.1.0, fixed in 2.1.3; from 2.2.0, fixed in 2.2.2; from 2.3.0, fixed in 2.3.2; fixed in 1.15.5; from 2.0.0, fixed in 2.0.4; from 2.1.0, fixed in 2.1.3; from 2.2.0, fixed in 2.2.2; from 2.3.0, fixed in 2.3.2.
CVE-2020-26269Unrated
Heap out of bounds read in filesystem glob matching in TensorFlow
Affected: from 2.4.0rc0, fixed in 2.4.0.
CVE-2020-26270Medium 4.4
CHECK-fail in LSTM with zero-length input in TensorFlow
Affected: fixed in 1.15.5; from 2.0.0, fixed in 2.0.4; from 2.1.0, fixed in 2.1.3; from 2.2.0, fixed in 2.2.2; from 2.3.0, fixed in 2.3.2; fixed in 1.15.5; from 2.0.0, fixed in 2.0.4; from 2.1.0, fixed in 2.1.3; from 2.2.0, fixed in 2.2.2; from 2.3.0, fixed in 2.3.2.
CVE-2020-26271Medium 4.4
Heap out of bounds access in MakeEdge in TensorFlow
Affected: fixed in 1.15.5; from 2.0.0, fixed in 2.0.4; from 2.1.0, fixed in 2.1.3; from 2.2.0, fixed in 2.2.2; from 2.3.0, fixed in 2.3.2; fixed in 1.15.5; from 2.0.0, fixed in 2.0.4; from 2.1.0, fixed in 2.1.3; from 2.2.0, fixed in 2.2.2; from 2.3.0, fixed in 2.3.2.
CVE-2020-15266Low 3.7
Undefined behavior in Tensorflow
Affected: fixed in 2.4.0.
CVE-2020-15265Medium 5.9
Segfault in Tensorflow
Affected: fixed in 2.4.0.
CVE-2020-15212High 8.1
Out of bounds access in tensorflow-lite
Affected: from 2.3.0, fixed in 2.3.1; from 2.2.0, fixed in 2.2.1; from 2.2.0, fixed in 2.2.1; from 2.3.0, fixed in 2.3.1.
CVE-2020-15213Medium 4.0
Denial of service in tensorflow-lite
Affected: from 2.2.0, fixed in 2.2.1; from 2.3.0, fixed in 2.3.1; from 2.2.0, fixed in 2.2.1; from 2.3.0, fixed in 2.3.1.
CVE-2020-15214High 8.1
Out of bounds write in tensorflow-lite
Affected: from 2.2.0, fixed in 2.2.1; from 2.3.0, fixed in 2.3.1; from 2.2.0, fixed in 2.2.1; from 2.3.0, fixed in 2.3.1.
CVE-2020-15201Medium 4.8
Heap buffer overflow in Tensorflow
Affected: fixed in 2.3.1; from 2.3.0, fixed in 2.3.1.
CVE-2020-15202Critical 9.0
Integer truncation in Shard API usage
Affected: fixed in 1.15.4; from 2.0.0, fixed in 2.0.3; from 2.1.0, fixed in 2.1.2; from 2.2.0, fixed in 2.2.1; from 2.3.0, fixed in 2.3.1; fixed in 1.15.4; from 2.0.0, fixed in 2.0.3; from 2.1.0, fixed in 2.1.2; from 2.2.0, fixed in 2.2.1; from 2.3.0, fixed in 2.3.1.
CVE-2020-15203High 7.5
Denial of Service in Tensorflow
Affected: fixed in 1.15.4; from 2.0.0, fixed in 2.0.3; from 2.1.0, fixed in 2.1.2; from 2.2.0, fixed in 2.2.1; from 2.3.0, fixed in 2.3.1; fixed in 1.15.4; from 2.0.0, fixed in 2.0.3; from 2.1.0, fixed in 2.1.2; from 2.2.0, fixed in 2.2.1; from 2.3.0, fixed in 2.3.1.
CVE-2020-15204Medium 5.3
Segfault in Tensorflow
Affected: fixed in 1.15.4; from 2.0.0, fixed in 2.0.3; from 2.1.0, fixed in 2.1.2; from 2.2.0, fixed in 2.2.1; from 2.3.0, fixed in 2.3.1; fixed in 1.15.4; from 2.0.0, fixed in 2.0.3; from 2.1.0, fixed in 2.1.2; from 2.2.0, fixed in 2.2.1; from 2.3.0, fixed in 2.3.1.
CVE-2020-15205Critical 9.0
Data leak in Tensorflow
Affected: fixed in 1.15.4; from 2.0.0, fixed in 2.0.3; from 2.1.0, fixed in 2.1.2; from 2.2.0, fixed in 2.2.1; from 2.3.0, fixed in 2.3.1; fixed in 1.15.4; from 2.0.0, fixed in 2.0.3; from 2.1.0, fixed in 2.1.2; from 2.2.0, fixed in 2.2.1; from 2.3.0, fixed in 2.3.1.
CVE-2020-15206Critical 9.0
Denial of Service in Tensorflow
Affected: fixed in 1.15.4; from 2.0.0, fixed in 2.0.3; from 2.1.0, fixed in 2.1.2; from 2.2.0, fixed in 2.2.1; from 2.3.0, fixed in 2.3.1; fixed in 1.15.4; from 2.0.0, fixed in 2.0.3; from 2.1.0, fixed in 2.1.2; from 2.2.0, fixed in 2.2.1; from 2.3.0, fixed in 2.3.1.
CVE-2020-15207High 8.7
Segfault and data corruption in tensorflow-lite
Affected: fixed in 1.15.4; from 2.0.0, fixed in 2.0.3; from 2.1.0, fixed in 2.1.2; from 2.2.0, fixed in 2.2.1; from 2.3.0, fixed in 2.3.1; fixed in 1.15.4; from 2.0.0, fixed in 2.0.3; from 2.1.0, fixed in 2.1.2; from 2.2.0, fixed in 2.2.1; from 2.3.0, fixed in 2.3.1.
CVE-2020-15208High 7.4
Data corruption in tensorflow-lite
Affected: fixed in 1.15.4; from 2.0.0, fixed in 2.0.3; from 2.1.0, fixed in 2.1.2; from 2.2.0, fixed in 2.2.1; from 2.3.0, fixed in 2.3.1; fixed in 1.15.4; from 2.0.0, fixed in 2.0.3; from 2.1.0, fixed in 2.1.2; from 2.2.0, fixed in 2.2.1; from 2.3.0, fixed in 2.3.1.
CVE-2020-15209Medium 5.9
Null pointer dereference in tensorflow-lite
Affected: fixed in 1.15.4; from 2.0.0, fixed in 2.0.3; from 2.1.0, fixed in 2.1.2; from 2.2.0, fixed in 2.2.1; from 2.3.0, fixed in 2.3.1; fixed in 1.15.4; from 2.0.0, fixed in 2.0.3; from 2.1.0, fixed in 2.1.2; from 2.2.0, fixed in 2.2.1; from 2.3.0, fixed in 2.3.1.
CVE-2020-15210Medium 6.5
Segmentation fault in tensorflow-lite
Affected: fixed in 1.15.4; from 2.0.0, fixed in 2.0.3; from 2.1.0, fixed in 2.1.2; from 2.2.0, fixed in 2.2.1; from 2.3.0, fixed in 2.3.1; fixed in 1.15.4; from 2.0.0, fixed in 2.0.3; from 2.1.0, fixed in 2.1.2; from 2.2.0, fixed in 2.2.1; from 2.3.0, fixed in 2.3.1.
CVE-2020-15211Medium 4.8
Out of bounds access in tensorflow-lite
Affected: fixed in 1.15.4; from 2.0.0, fixed in 2.0.3; from 2.1.0, fixed in 2.1.2; from 2.2.0, fixed in 2.2.1; from 2.3.0, fixed in 2.3.1; fixed in 1.15.4; from 2.0.0, fixed in 2.0.3; from 2.1.0, fixed in 2.1.2; from 2.2.0, fixed in 2.2.1; from 2.3.0, fixed in 2.3.1.
CVE-2020-15191Medium 5.3
Undefined behavior in Tensorflow
Affected: from 2.2.0, fixed in 2.2.1; from 2.3.0, fixed in 2.3.1; fixed in 2.2.1; from 2.3.0rc0, fixed in 2.3.1.
CVE-2020-15192Medium 4.3
Memory leak in Tensorflow
Affected: fixed in 2.2.1; from 2.3.0rc0, fixed in 2.3.1; from 2.2.0, fixed in 2.2.1; from 2.3.0, fixed in 2.3.1.
CVE-2020-15193High 7.1
Memory corruption in Tensorflow
Affected: fixed in 2.2.1; from 2.3.0rc0, fixed in 2.3.1; from 2.2.0, fixed in 2.2.1; from 2.3.0, fixed in 2.3.1.
CVE-2020-15194Medium 5.3
Denial of Service in Tensorflow
Affected: fixed in 1.15.4; from 2.0.0, fixed in 2.0.3; from 2.1.0, fixed in 2.1.2; from 2.2.0, fixed in 2.2.1; from 2.3.0, fixed in 2.3.1; fixed in 1.15.4; from 2.0.0, fixed in 2.0.3; from 2.1.0, fixed in 2.1.2; from 2.2.0, fixed in 2.2.1; from 2.3.0, fixed in 2.3.1.
CVE-2020-15195High 8.5
Heap buffer overflow in Tensorflow
Affected: fixed in 1.15.4; from 2.0.0, fixed in 2.0.3; from 2.1.0, fixed in 2.1.2; from 2.2.0, fixed in 2.2.1; from 2.3.0, fixed in 2.3.1; fixed in 1.15.4; from 2.0.0, fixed in 2.0.3; from 2.1.0, fixed in 2.1.2; from 2.2.0, fixed in 2.2.1; from 2.3.0, fixed in 2.3.1.
CVE-2020-15196High 8.5
Heap buffer overflow in Tensorflow
Affected: from 2.3.0, fixed in 2.3.1; fixed in 2.3.1.
CVE-2020-15197Medium 6.3
Denial of Service in Tensorflow
Affected: fixed in 2.3.1; from 2.3.0, fixed in 2.3.1.
CVE-2020-15198Medium 5.4
Heap buffer overflow in Tensorflow
Affected: from 2.3.0, fixed in 2.3.1; fixed in 2.3.1.
CVE-2020-15199Medium 5.9
Denial of Service in Tensorflow
Affected: from 2.3.0, fixed in 2.3.1; fixed in 2.3.1.
CVE-2020-15200Medium 5.9
Segfault in Tensorflow
Affected: fixed in 2.3.1; from 2.3.0, fixed in 2.3.1.
CVE-2020-15190Medium 5.3
Segfault in Tensorflow
Affected: fixed in 1.15.4; from 2.0.0, fixed in 2.0.3; from 2.1.0, fixed in 2.1.2; from 2.2.0, fixed in 2.2.1; from 2.3.0, fixed in 2.3.1; fixed in 1.15.4; from 2.0.0, fixed in 2.0.3; from 2.1.0, fixed in 2.1.2; from 2.2.0, fixed in 2.2.1; from 2.3.0, fixed in 2.3.1.
CVE-2018-21233Unrated
TensorFlow before 1.7.0 has an integer overflow that causes an out-of-bounds read, possibly causing disclosure of the contents of process…
Affected: fixed in 1.7.0.
CVE-2020-5215Medium 5.0
Segmentation faultin TensorFlow when converting a Python string to tf.float16
Affected: fixed in 1.15.2; from 2.0.0, fixed in 2.0.1; fixed in 1.15.2; from 2.0.0, fixed in 2.0.1.
CVE-2019-16778Low 2.6
Heap buffer overflow in `UnsortedSegmentSum` in TensorFlow
Affected: fixed in 1.15.0; from 1.0.0, fixed in 1.15.0.
CVE-2018-7575Unrated
Google TensorFlow 1.7.x and earlier is affected by a Buffer Overflow vulnerability.
Affected: fixed in 1.7.1.
CVE-2019-9635Unrated
NULL pointer dereference in Google TensorFlow before 1.12.2 could cause a denial of service via an invalid GIF file.
Affected: fixed in 1.12.2.
CVE-2018-10055Unrated
Invalid memory access and/or a heap buffer overflow in the TensorFlow XLA compiler in Google TensorFlow before 1.7.1 could cause a crash…
Affected: fixed in 1.7.1.
CVE-2018-7577Unrated
Memcpy parameter overlap in Google Snappy library 1.1.4, as used in Google TensorFlow before 1.7.1, could result in a crash or read from…
Affected: fixed in 1.7.1.
CVE-2018-8825Unrated
Google TensorFlow 1.7 and below is affected by: Buffer Overflow.
Affected: fixed in 1.7.1.
CVE-2018-7576Unrated
Google TensorFlow 1.6.x and earlier is affected by: Null Pointer Dereference.
Affected: fixed in 1.7.0rc0.