# tensorflow (PyPI) vulnerabilities

427 known vulnerabilities (5 critical, 104 high, 211 medium, 99 low), with the versions each affects and the releases that fix them.

## At a glance

- Latest release: not known (cve.now hasn't read this package's releases)
- Newest unaffected release: not known without release data
- Registry: https://pypi.org/project/tensorflow/

## Advisories (427)

### [CVE-2023-33976](https://cve.now/CVE-2023-33976): TensorFlow segfault in array\_ops.upper\_bound

- Severity: High 7.5
- Published: Jul 30, 2024
- Affected: fixed in 2.12.1.

### [CVE-2023-25661](https://cve.now/CVE-2023-25661): Denial of Service in TensorFlow

- Severity: Medium 6.5
- Published: Mar 27, 2023
- Affected: fixed in 2.11.1.

### [CVE-2023-25660](https://cve.now/CVE-2023-25660): TensorFlow vulnerable to seg fault in \`tf.raw\_ops.Print\`

- Severity: High 7.5
- Published: Mar 24, 2023
- Affected: fixed in 2.11.1.

### [CVE-2023-25659](https://cve.now/CVE-2023-25659): TensorFlow vulnerable to Out-of-Bounds Read in DynamicStitch

- Severity: High 7.5
- Published: Mar 24, 2023
- Affected: fixed in 2.11.1.

### [CVE-2023-25658](https://cve.now/CVE-2023-25658): TensorFlow vulnerable to Out-of-Bounds Read in GRUBlockCellGrad

- Severity: High 7.5
- Published: Mar 24, 2023
- Affected: fixed in 2.11.1.

### [CVE-2023-25662](https://cve.now/CVE-2023-25662): TensorFlow vulnerable to integer overflow in EditDistance

- Severity: High 7.5
- Published: Mar 24, 2023
- Affected: fixed in 2.11.1.

### [CVE-2023-25663](https://cve.now/CVE-2023-25663): TensorFlow has Null Pointer Error in TensorArrayConcatV2

- Severity: High 7.5
- Published: Mar 24, 2023
- Affected: fixed in 2.11.1.

### [CVE-2023-25664](https://cve.now/CVE-2023-25664): TensorFlow vulnerable to Heap Buffer Overflow in AvgPoolGrad

- Severity: High 7.5
- Published: Mar 24, 2023
- Affected: fixed in 2.11.1.

### [CVE-2023-25667](https://cve.now/CVE-2023-25667): TensorFlow vulnerable to segfault when opening multiframe gif

- Severity: Medium 6.5
- Published: Mar 24, 2023
- Affected: fixed in 2.11.1.

### [CVE-2023-25666](https://cve.now/CVE-2023-25666): TensorFlow has Floating Point Exception in AudioSpectrogram

- Severity: High 7.5
- Published: Mar 24, 2023
- Affected: fixed in 2.11.1.

### [CVE-2023-25665](https://cve.now/CVE-2023-25665): TensorFlow has Null Pointer Error in SparseSparseMaximum

- Severity: High 7.5
- Published: Mar 24, 2023
- Affected: fixed in 2.11.1.

### [CVE-2023-25668](https://cve.now/CVE-2023-25668): TensorFlow vulnerable to heap out-of-buffer read in the QuantizeAndDequantize operation

- Severity: Critical 9.8
- Published: Mar 24, 2023
- Affected: fixed in 2.11.1.

### [CVE-2023-25669](https://cve.now/CVE-2023-25669): TensorFlow has Floating Point Exception in AvgPoolGrad with XLA

- Severity: High 7.5
- Published: Mar 24, 2023
- Affected: fixed in 2.11.1.

### [CVE-2023-25670](https://cve.now/CVE-2023-25670): TensorFlow has Null Pointer Error in QuantizedMatMulWithBiasAndDequantize

- Severity: High 7.5
- Published: Mar 24, 2023
- Affected: fixed in 2.11.1.

### [CVE-2023-25671](https://cve.now/CVE-2023-25671): TensorFlow has segmentation fault in tfg-translate

- Severity: High 7.5
- Published: Mar 24, 2023
- Affected: fixed in 2.11.1.

### [CVE-2023-25672](https://cve.now/CVE-2023-25672): TensorFlow has Null Pointer Error in LookupTableImportV2

- Severity: High 7.5
- Published: Mar 24, 2023
- Affected: fixed in 2.11.1.

### [CVE-2023-25673](https://cve.now/CVE-2023-25673): TensorFlow has Floating Point Exception in TensorListSplit with XLA

- Severity: High 7.5
- Published: Mar 24, 2023
- Affected: fixed in 2.11.1.

### [CVE-2023-25674](https://cve.now/CVE-2023-25674): TensorFlow has Null Pointer Error in RandomShuffle with XLA enable

- Severity: High 7.5
- Published: Mar 24, 2023
- Affected: fixed in 2.11.1.

### [CVE-2023-25675](https://cve.now/CVE-2023-25675): TensorFlow has Segfault in Bincount with XLA

- Severity: High 7.5
- Published: Mar 24, 2023
- Affected: fixed in 2.11.1.

### [CVE-2023-25676](https://cve.now/CVE-2023-25676): TensorFlow has null dereference on ParallelConcat with XLA

- Severity: High 7.5
- Published: Mar 24, 2023
- Affected: fixed in 2.11.1.

### [CVE-2023-25801](https://cve.now/CVE-2023-25801): TensorFlow has double free in Fractional(Max/Avg)Pool

- Severity: High 8.0
- Published: Mar 24, 2023
- Affected: fixed in 2.11.1.

### [CVE-2023-27579](https://cve.now/CVE-2023-27579): TensorFlow has Floating Point Exception in TFLite in conv kernel

- Severity: High 7.5
- Published: Mar 24, 2023
- Affected: fixed in 2.11.1.

### [CVE-2022-41910](https://cve.now/CVE-2022-41910): Heap out of bounds read in \`QuantizeAndDequantizeV2\` in Tensorflow

- Severity: Medium 4.8
- Published: Dec 6, 2022
- Affected: fixed in 2.8.4; from 2.9.0, fixed in 2.9.3; from 2.10.0, fixed in 2.10.1; fixed in 2.8.4; from 2.9.0, fixed in 2.9.3; from 2.10.0, fixed in 2.10.1.

### [CVE-2022-41902](https://cve.now/CVE-2022-41902): Out of bounds write in grappler in Tensorflow

- Severity: High 7.1
- Published: Dec 6, 2022
- Affected: fixed in 2.8.4; from 2.9.0, fixed in 2.9.3; from 2.10.0, fixed in 2.10.1; fixed in 2.8.4; from 2.9.0, fixed in 2.9.3; from 2.10.0, fixed in 2.10.1.

### [CVE-2022-41911](https://cve.now/CVE-2022-41911): Invalid char to bool conversion when printing a tensor in Tensorflow

- Severity: Medium 4.8
- Published: Nov 18, 2022
- Affected: fixed in 2.8.4; from 2.9.0, fixed in 2.9.3; from 2.10.0, fixed in 2.10.1; fixed in 2.8.4; from 2.9.0, fixed in 2.9.3; from 2.10.0, fixed in 2.10.1.

### [CVE-2022-41909](https://cve.now/CVE-2022-41909): Segfault in \`CompositeTensorVariantToComponents\` in Tensorflow

- Severity: Medium 4.8
- Published: Nov 18, 2022
- Affected: fixed in 2.8.4; from 2.9.0, fixed in 2.9.3; from 2.10.0, fixed in 2.10.1; fixed in 2.8.4; from 2.9.0, fixed in 2.9.3; from 2.10.0, fixed in 2.10.1.

### [CVE-2022-41908](https://cve.now/CVE-2022-41908): \`CHECK\` fail via inputs in \`PyFunc\` in Tensorflow

- Severity: Medium 4.8
- Published: Nov 18, 2022
- Affected: fixed in 2.8.4; from 2.9.0, fixed in 2.9.3; from 2.10.0, fixed in 2.10.1; fixed in 2.8.4; from 2.9.0, fixed in 2.9.3; from 2.10.0, fixed in 2.10.1.

### [CVE-2022-41907](https://cve.now/CVE-2022-41907): Overflow in \`ResizeNearestNeighborGrad\` in Tensorflow

- Severity: Medium 4.8
- Published: Nov 18, 2022
- Affected: fixed in 2.8.4; from 2.9.0, fixed in 2.9.3; from 2.10.0, fixed in 2.10.1; fixed in 2.8.4; from 2.9.0, fixed in 2.9.3; from 2.10.0, fixed in 2.10.1.

### [CVE-2022-41901](https://cve.now/CVE-2022-41901): \`CHECK\_EQ\` fail via input in \`SparseMatrixNNZ\` in Tensorflow

- Severity: Medium 4.8
- Published: Nov 18, 2022
- Affected: fixed in 2.8.4; from 2.9.0, fixed in 2.9.3; from 2.10.0, fixed in 2.10.1; fixed in 2.8.4; from 2.9.0, fixed in 2.9.3; from 2.10.0, fixed in 2.10.1.

### [CVE-2022-41900](https://cve.now/CVE-2022-41900): FractionalMaxPool and FractionalAVGPool heap out-of-bounds acess in Tensorflow

- Severity: High 7.1
- Published: Nov 18, 2022
- Affected: fixed in 2.8.4; from 2.9.0, fixed in 2.9.3; from 2.10.0, fixed in 2.10.1; fixed in 2.8.4; from 2.9.0, fixed in 2.9.3; from 2.10.0, fixed in 2.10.1.

### [CVE-2022-41899](https://cve.now/CVE-2022-41899): \`CHECK\` fail via inputs in \`SdcaOptimizer\` in Tensorflow

- Severity: Medium 4.8
- Published: Nov 18, 2022
- Affected: fixed in 2.8.4; from 2.9.0, fixed in 2.9.3; from 2.10.0, fixed in 2.10.1; fixed in 2.8.4; from 2.9.0, fixed in 2.9.3; from 2.10.0, fixed in 2.10.1.

### [CVE-2022-41898](https://cve.now/CVE-2022-41898): \`CHECK\` fail via inputs in \`SparseFillEmptyRowsGrad\` in Tensorflow

- Severity: Medium 4.8
- Published: Nov 18, 2022
- Affected: fixed in 2.8.4; from 2.9.0, fixed in 2.9.3; from 2.10.0, fixed in 2.10.1; fixed in 2.8.4; from 2.9.0, fixed in 2.9.3; from 2.10.0, fixed in 2.10.1.

### [CVE-2022-41897](https://cve.now/CVE-2022-41897): \`FractionalMaxPoolGrad\` Heap out of bounds read in Tensorflow

- Severity: Medium 4.8
- Published: Nov 18, 2022
- Affected: fixed in 2.8.4; from 2.9.0, fixed in 2.9.3; from 2.10.0, fixed in 2.10.1; fixed in 2.8.4; from 2.9.0, fixed in 2.9.3; from 2.10.0, fixed in 2.10.1.

### [CVE-2022-41896](https://cve.now/CVE-2022-41896): \`tf.raw\_ops.Mfcc\` crashes in Tensorflow

- Severity: Medium 4.8
- Published: Nov 18, 2022
- Affected: fixed in 2.8.4; from 2.9.0, fixed in 2.9.3; from 2.10.0, fixed in 2.10.1; fixed in 2.8.4; from 2.9.0, fixed in 2.9.3; from 2.10.0, fixed in 2.10.1.

### [CVE-2022-41895](https://cve.now/CVE-2022-41895): \`MirrorPadGrad\` heap out of bounds read in Tensorflow

- Severity: Medium 4.8
- Published: Nov 18, 2022
- Affected: fixed in 2.8.4; from 2.9.0, fixed in 2.9.3; from 2.10.0, fixed in 2.10.1; fixed in 2.8.4; from 2.9.0, fixed in 2.9.3; from 2.10.0, fixed in 2.10.1.

### [CVE-2022-41894](https://cve.now/CVE-2022-41894): Buffer overflow in \`CONV\_3D\_TRANSPOSE\` on TFLite

- Severity: High 7.1
- Published: Nov 18, 2022
- Affected: fixed in 2.8.4; from 2.9.0, fixed in 2.9.3; from 2.10.0, fixed in 2.10.1; fixed in 2.8.4; from 2.9.0, fixed in 2.9.3; from 2.10.0, fixed in 2.10.1.

### [CVE-2022-41893](https://cve.now/CVE-2022-41893): \`CHECK\_EQ\` fail in \`tf.raw\_ops.TensorListResize\` in Tensorflow

- Severity: Medium 4.8
- Published: Nov 18, 2022
- Affected: fixed in 2.8.4; from 2.9.0, fixed in 2.9.3; from 2.10.0, fixed in 2.10.1; fixed in 2.8.4; from 2.9.0, fixed in 2.9.3; from 2.10.0, fixed in 2.10.1.

### [CVE-2022-41891](https://cve.now/CVE-2022-41891): Segfault in \`tf.raw\_ops.TensorListConcat\` in Tensorflow

- Severity: Medium 4.8
- Published: Nov 18, 2022
- Affected: fixed in 2.8.4; from 2.9.0, fixed in 2.9.3; from 2.10.0, fixed in 2.10.1; fixed in 2.8.4; from 2.9.0, fixed in 2.9.3; from 2.10.0, fixed in 2.10.1.

### [CVE-2022-41890](https://cve.now/CVE-2022-41890): \`CHECK\` fail in \`BCast\` overflow in Tensorflow

- Severity: Medium 4.8
- Published: Nov 18, 2022
- Affected: fixed in 2.8.4; from 2.9.0, fixed in 2.9.3; from 2.10.0, fixed in 2.10.1; fixed in 2.8.4; from 2.9.0, fixed in 2.9.3; from 2.10.0, fixed in 2.10.1.

### [CVE-2022-41889](https://cve.now/CVE-2022-41889): Segfault via invalid attributes in \`pywrap\_tfe\_src.cc\` in Tensorflow

- Severity: Medium 5.5
- Published: Nov 18, 2022
- Affected: fixed in 2.8.4; from 2.9.0, fixed in 2.9.3; from 2.10.0, fixed in 2.10.1; fixed in 2.8.4; from 2.9.0, fixed in 2.9.3; from 2.10.0, fixed in 2.10.1.

### [CVE-2022-41888](https://cve.now/CVE-2022-41888): Unckecked rank size in \`tf.image.generate\_bounding\_box\_proposals\` in Tensorflow

- Severity: Medium 4.8
- Published: Nov 18, 2022
- Affected: fixed in 2.8.4; from 2.9.0, fixed in 2.9.3; from 2.10.0, fixed in 2.10.1; fixed in 2.8.4; from 2.9.0, fixed in 2.9.3; from 2.10.0, fixed in 2.10.1.

### [CVE-2022-41887](https://cve.now/CVE-2022-41887): Overflow in \`tf.keras.losses.poisson\` in Tensorflow

- Severity: Medium 4.8
- Published: Nov 18, 2022
- Affected: fixed in 2.9.3; from 2.10.0, fixed in 2.10.1; fixed in 2.9.3; from 2.10.0, fixed in 2.10.1.

### [CVE-2022-41886](https://cve.now/CVE-2022-41886): Overflow in \`ImageProjectiveTransformV2\` in Tensorflow

- Severity: Medium 4.8
- Published: Nov 18, 2022
- Affected: fixed in 2.8.4; from 2.9.0, fixed in 2.9.3; from 2.10.0, fixed in 2.10.1; fixed in 2.8.4; from 2.9.0, fixed in 2.9.3; from 2.10.0, fixed in 2.10.1.

### [CVE-2022-41885](https://cve.now/CVE-2022-41885): Overflow in \`FusedResizeAndPadConv2D\` in Tensorflow

- Severity: Medium 4.8
- Published: Nov 18, 2022
- Affected: fixed in 2.7.4; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1; fixed in 2.7.4; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1.

### [CVE-2022-41884](https://cve.now/CVE-2022-41884): Seg fault in \`ndarray\_tensor\_bridge\` due to zero and large inputs in Tensorflow

- Severity: Medium 4.8
- Published: Nov 18, 2022
- Affected: fixed in 2.8.4; from 2.9.0, fixed in 2.9.3; from 2.10.0, fixed in 2.10.1; fixed in 2.8.4; from 2.9.0, fixed in 2.9.3; from 2.10.0, fixed in 2.10.1.

### [CVE-2022-41883](https://cve.now/CVE-2022-41883): Out of bounds segmentation fault due to unequal op inputs in Tensorflow

- Severity: Medium 6.8
- Published: Nov 18, 2022
- Affected: from 2.10.0, fixed in 2.10.1.

### [CVE-2022-41880](https://cve.now/CVE-2022-41880): ThreadUnsafeUnigramCandidateSampler Heap out of bounds in Tensorflow

- Severity: Medium 6.8
- Published: Nov 18, 2022
- Affected: fixed in 2.8.4; from 2.9.0, fixed in 2.9.3; from 2.10.0, fixed in 2.10.1; from 2.10.0, fixed in 2.10.1; fixed in 2.8.4; from 2.9.0, fixed in 2.9.3.

### [CVE-2022-36015](https://cve.now/CVE-2022-36015): Integer overflow in math ops in TensorFlow

- Severity: Medium 5.9
- Published: Sep 16, 2022
- Affected: fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1; fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1.

### [CVE-2022-36012](https://cve.now/CVE-2022-36012): Assertion fail on MLIR empty edge names in TensorFlow

- Severity: Medium 5.9
- Published: Sep 16, 2022
- Affected: fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1; fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1.

### [CVE-2022-35996](https://cve.now/CVE-2022-35996): Floating point exception in \`Conv2D\` in TensorFlow

- Severity: Medium 5.9
- Published: Sep 16, 2022
- Affected: fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1; fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1.

### [CVE-2022-36027](https://cve.now/CVE-2022-36027): Segfault TFLite converter on per-channel quantized transposed convolutions in TensorFlow

- Severity: Medium 5.9
- Published: Sep 16, 2022
- Affected: fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1; fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1.

### [CVE-2022-36017](https://cve.now/CVE-2022-36017): Segfault in \`Requantize\` in TensorFlow

- Severity: Medium 5.9
- Published: Sep 16, 2022
- Affected: fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1; fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1.

### [CVE-2022-36014](https://cve.now/CVE-2022-36014): Null-dereference in \`mlir::tfg::TFOp::nameAttr\` in TensorFlow

- Severity: Medium 5.9
- Published: Sep 16, 2022
- Affected: fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1; fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1.

### [CVE-2022-36000](https://cve.now/CVE-2022-36000): Null dereference on MLIR on empty function attributes in TensorFlow

- Severity: Medium 5.9
- Published: Sep 16, 2022
- Affected: fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1; fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1.

### [CVE-2022-36011](https://cve.now/CVE-2022-36011): Null dereference on MLIR on empty function attributes in TensorFlow

- Severity: Medium 5.9
- Published: Sep 16, 2022
- Affected: fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1; fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1.

### [CVE-2022-36013](https://cve.now/CVE-2022-36013): Null-dereference in \`mlir::tfg::GraphDefImporter::ConvertNodeDef\` in TensorFlow

- Severity: Medium 5.9
- Published: Sep 16, 2022
- Affected: fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1; fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1.

### [CVE-2022-35994](https://cve.now/CVE-2022-35994): \`CHECK\` fail in \`CollectiveGather\` in TensorFlow

- Severity: Medium 5.9
- Published: Sep 16, 2022
- Affected: fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1; fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1.

### [CVE-2022-35993](https://cve.now/CVE-2022-35993): \`CHECK\` fail in \`SetSize\` in TensorFlow

- Severity: Medium 5.9
- Published: Sep 16, 2022
- Affected: fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1; fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1.

### [CVE-2022-35992](https://cve.now/CVE-2022-35992): \`CHECK\` fail in \`TensorListFromTensor\` in TensorFlow

- Severity: Medium 5.9
- Published: Sep 16, 2022
- Affected: fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1; fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1.

### [CVE-2022-35991](https://cve.now/CVE-2022-35991): \`CHECK\` fail in \`TensorListScatter\` and \`TensorListScatterV2\` in TensorFlow

- Severity: Medium 5.9
- Published: Sep 16, 2022
- Affected: fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1; fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1.

### [CVE-2022-35999](https://cve.now/CVE-2022-35999): \`CHECK\` fail in \`Conv2DBackpropInput\` in TensorFlow

- Severity: Medium 5.9
- Published: Sep 16, 2022
- Affected: fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1; fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1.

### [CVE-2022-35998](https://cve.now/CVE-2022-35998): \`CHECK\` fail in \`EmptyTensorList\` in TensorFlow

- Severity: Medium 5.9
- Published: Sep 16, 2022
- Affected: fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1; fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1.

### [CVE-2022-35997](https://cve.now/CVE-2022-35997): \`CHECK\` fail in \`tf.sparse.cross\` in TensorFlow

- Severity: Medium 5.9
- Published: Sep 16, 2022
- Affected: fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1; fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1.

### [CVE-2022-35995](https://cve.now/CVE-2022-35995): \`CHECK\` fail in \`AudioSummaryV2\` in TensorFlow

- Severity: Medium 5.9
- Published: Sep 16, 2022
- Affected: fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1; fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1.

### [CVE-2022-36016](https://cve.now/CVE-2022-36016): \`CHECK\`-fail in \`tensorflow::full\_type::SubstituteFromAttrs\` in TensorFlow

- Severity: Medium 5.9
- Published: Sep 16, 2022
- Affected: fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1; fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1.

### [CVE-2022-36005](https://cve.now/CVE-2022-36005): \`CHECK\` fail in \`FakeQuantWithMinMaxVarsGradient\` in TensorFlow

- Severity: Medium 5.9
- Published: Sep 16, 2022
- Affected: fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1; fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1.

### [CVE-2022-36004](https://cve.now/CVE-2022-36004): \`CHECK\` fail in \`tf.random.gamma\` in TensorFlow

- Severity: Medium 5.9
- Published: Sep 16, 2022
- Affected: fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1; fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1.

### [CVE-2022-36003](https://cve.now/CVE-2022-36003): \`CHECK\` fail in \`RandomPoissonV2\` in TensorFlow

- Severity: Medium 5.9
- Published: Sep 16, 2022
- Affected: fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1; fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1.

### [CVE-2022-36002](https://cve.now/CVE-2022-36002): \`CHECK\` fail in \`Unbatch\` in TensorFlow

- Severity: Medium 5.9
- Published: Sep 16, 2022
- Affected: fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1; fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1.

### [CVE-2022-36001](https://cve.now/CVE-2022-36001): \`CHECK\` fail in \`DrawBoundingBoxes\` in TensorFlow

- Severity: Medium 5.9
- Published: Sep 16, 2022
- Affected: fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1; fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1.

### [CVE-2022-36026](https://cve.now/CVE-2022-36026): \`CHECK\` fail in \`QuantizeAndDequantizeV3\` in TensorFlow

- Severity: Medium 5.9
- Published: Sep 16, 2022
- Affected: fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1; fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1.

### [CVE-2022-36018](https://cve.now/CVE-2022-36018): \`CHECK\` fail in \`RaggedTensorToVariant\` in TensorFlow

- Severity: Medium 5.9
- Published: Sep 16, 2022
- Affected: fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1; fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1.

### [CVE-2022-36019](https://cve.now/CVE-2022-36019): \`CHECK\` fail in \`FakeQuantWithMinMaxVarsPerChannel\` in TensorFlow

- Severity: Medium 5.9
- Published: Sep 16, 2022
- Affected: fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1; fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1.

### [CVE-2022-35990](https://cve.now/CVE-2022-35990): \`CHECK\` fail in \`FakeQuantWithMinMaxVarsPerChannelGradient\` in TensorFlow

- Severity: Medium 5.9
- Published: Sep 16, 2022
- Affected: fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1; fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1.

### [CVE-2022-35986](https://cve.now/CVE-2022-35986): Segfault in \`RaggedBincount\` in TensorFlow

- Severity: Medium 5.9
- Published: Sep 16, 2022
- Affected: fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1; fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1.

### [CVE-2022-35987](https://cve.now/CVE-2022-35987): \`CHECK\` fail in \`DenseBincount\` in TensorFlow

- Severity: Medium 5.9
- Published: Sep 16, 2022
- Affected: fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1; fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1.

### [CVE-2022-35985](https://cve.now/CVE-2022-35985): \`CHECK\` fail in \`LRNGrad\` in TensorFlow

- Severity: Medium 5.9
- Published: Sep 16, 2022
- Affected: fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1; fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1.

### [CVE-2022-35984](https://cve.now/CVE-2022-35984): \`CHECK\` fail in \`ParameterizedTruncatedNormal\` in TensorFlow

- Severity: Medium 5.9
- Published: Sep 16, 2022
- Affected: fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1; fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1.

### [CVE-2022-35983](https://cve.now/CVE-2022-35983): \`CHECK\` fail in \`Save\` and \`SaveSlices\` in TensorFlow

- Severity: Medium 5.9
- Published: Sep 16, 2022
- Affected: fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1; fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1.

### [CVE-2022-35989](https://cve.now/CVE-2022-35989): \`CHECK\` fail in \`MaxPool\` in TensorFlow

- Severity: Medium 5.9
- Published: Sep 16, 2022
- Affected: fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1; fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1.

### [CVE-2022-35988](https://cve.now/CVE-2022-35988): \`CHECK\` fail in \`tf.linalg.matrix\_rank\` in TensorFlow

- Severity: Medium 5.9
- Published: Sep 16, 2022
- Affected: fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1; fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1.

### [CVE-2022-35982](https://cve.now/CVE-2022-35982): Segfault in \`SparseBincount\` in TensorFlow

- Severity: Medium 5.9
- Published: Sep 16, 2022
- Affected: fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1; fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1.

### [CVE-2022-35981](https://cve.now/CVE-2022-35981): \`CHECK\` fail in \`FractionalMaxPoolGrad\` in TensorFlow

- Severity: Medium 5.9
- Published: Sep 16, 2022
- Affected: fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1; fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1.

### [CVE-2022-35979](https://cve.now/CVE-2022-35979): Segfault in \`QuantizedRelu\` and \`QuantizedRelu6\`

- Severity: Medium 5.9
- Published: Sep 16, 2022
- Affected: fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1; fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1.

### [CVE-2022-35974](https://cve.now/CVE-2022-35974): Segfault in \`QuantizeDownAndShrinkRange\` in TensorFlow

- Severity: Medium 5.9
- Published: Sep 16, 2022
- Affected: fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1; fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1.

### [CVE-2022-35972](https://cve.now/CVE-2022-35972): Segfault in \`QuantizedBiasAdd\` in TensorFlow

- Severity: Medium 5.9
- Published: Sep 16, 2022
- Affected: fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1; fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1.

### [CVE-2022-35973](https://cve.now/CVE-2022-35973): Segfault in \`QuantizedMatMul\` in TensorFlow

- Severity: Medium 5.9
- Published: Sep 16, 2022
- Affected: fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1; fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1.

### [CVE-2022-35971](https://cve.now/CVE-2022-35971): \`CHECK\` fail in \`FakeQuantWithMinMaxVars\` in TensorFlow

- Severity: Medium 5.9
- Published: Sep 16, 2022
- Affected: fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1; fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1.

### [CVE-2022-35969](https://cve.now/CVE-2022-35969): \`CHECK\` fail in \`Conv2DBackpropInput\` in TensorFlow

- Severity: Medium 5.9
- Published: Sep 16, 2022
- Affected: fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1; fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1.

### [CVE-2022-35970](https://cve.now/CVE-2022-35970): Segfault in \`QuantizedInstanceNorm\` in TensorFlow

- Severity: Medium 5.9
- Published: Sep 16, 2022
- Affected: fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1; fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1.

### [CVE-2022-35968](https://cve.now/CVE-2022-35968): \`CHECK\` fail in \`AvgPoolGrad\` in TensorFlow

- Severity: Medium 5.9
- Published: Sep 16, 2022
- Affected: fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1; fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1.

### [CVE-2022-35966](https://cve.now/CVE-2022-35966): Segfault in \`QuantizedAvgPool\` in TensorFlow

- Severity: Medium 5.9
- Published: Sep 16, 2022
- Affected: fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1; fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1.

### [CVE-2022-35967](https://cve.now/CVE-2022-35967): Segfault in \`QuantizedAdd\` in TensorFlow

- Severity: Medium 5.9
- Published: Sep 16, 2022
- Affected: fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1; fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1.

### [CVE-2022-35964](https://cve.now/CVE-2022-35964): Segfault in \`BlockLSTMGradV2\` in TensorFlow

- Severity: Medium 5.9
- Published: Sep 16, 2022
- Affected: fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1; fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1.

### [CVE-2022-35965](https://cve.now/CVE-2022-35965): Segfault in \`LowerBound\` and \`UpperBound\` in TensorFlow

- Severity: Medium 5.9
- Published: Sep 16, 2022
- Affected: fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1; fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1.

### [CVE-2022-35963](https://cve.now/CVE-2022-35963): \`CHECK\` failures in \`FractionalAvgPoolGrad\` in TensorFlow

- Severity: Medium 5.9
- Published: Sep 16, 2022
- Affected: fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1; fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1.

### [CVE-2022-35960](https://cve.now/CVE-2022-35960): \`CHECK\` failure in \`TensorListReserve\` in TensorFlow

- Severity: Medium 5.9
- Published: Sep 16, 2022
- Affected: fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1; fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1.

### [CVE-2022-35959](https://cve.now/CVE-2022-35959): \`CHECK\` failures in \`AvgPool3DGrad\` in TensorFlow

- Severity: Medium 5.9
- Published: Sep 16, 2022
- Affected: fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1; fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1.

### [CVE-2022-35952](https://cve.now/CVE-2022-35952): \`CHECK\` failures in \`UnbatchGradOp\` in TensorFlow

- Severity: Medium 5.9
- Published: Sep 16, 2022
- Affected: fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1; fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1.

### [CVE-2022-35940](https://cve.now/CVE-2022-35940): Int overflow in \`RaggedRangeOp\` in Tensoflow

- Severity: Medium 5.9
- Published: Sep 16, 2022
- Affected: fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1; fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1.

### [CVE-2022-35941](https://cve.now/CVE-2022-35941): \`CHECK\` failure in \`AvgPoolOp\` in Tensorflow

- Severity: Medium 5.9
- Published: Sep 16, 2022
- Affected: fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.2; fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.2.

### [CVE-2022-35937](https://cve.now/CVE-2022-35937): OOB read in \`Gather\_nd\` op in TensorFlow Lite

- Severity: High 7.0
- Published: Sep 16, 2022
- Affected: fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1; fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1.

### [CVE-2022-35939](https://cve.now/CVE-2022-35939): Out of bounds write in \`scatter\_nd\` op in TensorFlow Lite

- Severity: High 7.0
- Published: Sep 16, 2022
- Affected: fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1; fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1.

### [CVE-2022-35935](https://cve.now/CVE-2022-35935): \`CHECK\` failure in \`SobolSample\` via missing validation in TensorFlow

- Severity: Medium 5.9
- Published: Sep 16, 2022
- Affected: fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1; fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1.

### [CVE-2022-35934](https://cve.now/CVE-2022-35934): \`CHECK\` failure in tf.reshape in Tensorflow

- Severity: Medium 5.9
- Published: Sep 16, 2022
- Affected: fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1; fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; from 2.9.0, fixed in 2.9.1.

### [CVE-2022-29216](https://cve.now/CVE-2022-29216): Code injection in \`saved\_model\_cli\` in TensorFlow

- Severity: High 7.8
- Published: May 20, 2022
- Affected: fixed in 2.6.4; from 2.7.0, fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; fixed in 2.6.4; from 2.7.0, fixed in 2.7.2; from 2.8.0, fixed in 2.8.1.

### [CVE-2022-29213](https://cve.now/CVE-2022-29213): Incomplete validation in signal ops leads to crashes in TensorFlow

- Severity: Medium 5.5
- Published: May 20, 2022
- Affected: fixed in 2.6.4; from 2.7.0, fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; fixed in 2.6.4; from 2.7.0, fixed in 2.7.2; from 2.8.0, fixed in 2.8.1.

### [CVE-2022-29210](https://cve.now/CVE-2022-29210): Heap buffer overflow due to incorrect hash function in TensorFlow

- Severity: Medium 5.5
- Published: May 20, 2022
- Affected: from 2.8.0, fixed in 2.8.1.

### [CVE-2022-29209](https://cve.now/CVE-2022-29209): Type confusion leading to \`CHECK\`-failure based denial of service in TensorFlow

- Severity: Medium 5.5
- Published: May 20, 2022
- Affected: fixed in 2.6.4; from 2.7.0, fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; fixed in 2.6.4; from 2.7.0, fixed in 2.7.2; from 2.8.0, fixed in 2.8.1.

### [CVE-2022-29211](https://cve.now/CVE-2022-29211): Segfault in TensorFlow if \`tf.histogram\_fixed\_width\` is called with NaN values

- Severity: Medium 5.5
- Published: May 20, 2022
- Affected: fixed in 2.6.4; from 2.7.0, fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; fixed in 2.6.4; from 2.7.0, fixed in 2.7.2; from 2.8.0, fixed in 2.8.1.

### [CVE-2022-29212](https://cve.now/CVE-2022-29212): Core dump when loading TFLite models with quantization in TensorFlow

- Severity: Medium 5.5
- Published: May 20, 2022
- Affected: fixed in 2.6.4; from 2.7.0, fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; fixed in 2.6.4; from 2.7.0, fixed in 2.7.2; from 2.8.0, fixed in 2.8.1.

### [CVE-2022-29201](https://cve.now/CVE-2022-29201): Missing validation in \`QuantizedConv2D\` results in undefined behavior in TensorFlow

- Severity: Medium 5.5
- Published: May 20, 2022
- Affected: fixed in 2.6.4; from 2.7.0, fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; fixed in 2.6.4; from 2.7.0, fixed in 2.7.2; from 2.8.0, fixed in 2.8.1.

### [CVE-2022-29202](https://cve.now/CVE-2022-29202): Denial of service in TensorFlow due to lack of validation in \`tf.ragged.constant\`

- Severity: Medium 5.5
- Published: May 20, 2022
- Affected: fixed in 2.6.4; from 2.7.0, fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; fixed in 2.6.4; from 2.7.0, fixed in 2.7.2; from 2.8.0, fixed in 2.8.1.

### [CVE-2022-29203](https://cve.now/CVE-2022-29203): Integer overflow in \`SpaceToBatchND\` in TensorFlow

- Severity: Medium 5.5
- Published: May 20, 2022
- Affected: fixed in 2.6.4; from 2.7.0, fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; fixed in 2.6.4; from 2.7.0, fixed in 2.7.2; from 2.8.0, fixed in 2.8.1.

### [CVE-2022-29204](https://cve.now/CVE-2022-29204): Missing validation causes denial of service in TensorFlow via \`Conv3DBackpropFilterV2\`

- Severity: Medium 5.5
- Published: May 20, 2022
- Affected: fixed in 2.6.4; from 2.7.0, fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; fixed in 2.6.4; from 2.7.0, fixed in 2.7.2; from 2.8.0, fixed in 2.8.1.

### [CVE-2022-29208](https://cve.now/CVE-2022-29208): Segfault and Out-of-bounds Write write due to incomplete validation in TensorFlow

- Severity: High 7.1
- Published: May 20, 2022
- Affected: fixed in 2.6.4; from 2.7.0, fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; fixed in 2.6.4; from 2.7.0, fixed in 2.7.2; from 2.8.0, fixed in 2.8.1.

### [CVE-2022-29205](https://cve.now/CVE-2022-29205): Segfault due to missing support for quantized types in TensorFlow

- Severity: Medium 5.5
- Published: May 20, 2022
- Affected: fixed in 2.6.4; from 2.7.0, fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; fixed in 2.6.4; from 2.7.0, fixed in 2.7.2; from 2.8.0, fixed in 2.8.1.

### [CVE-2022-29206](https://cve.now/CVE-2022-29206): Missing validation results in undefined behavior in \`SparseTensorDenseAdd\` in TensorFlow

- Severity: Medium 5.5
- Published: May 20, 2022
- Affected: fixed in 2.6.4; from 2.7.0, fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; fixed in 2.6.4; from 2.7.0, fixed in 2.7.2; from 2.8.0, fixed in 2.8.1.

### [CVE-2022-29207](https://cve.now/CVE-2022-29207): Undefined behavior when users supply invalid resource handles in TensorFlow

- Severity: Medium 5.5
- Published: May 20, 2022
- Affected: fixed in 2.6.4; from 2.7.0, fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; fixed in 2.6.4; from 2.7.0, fixed in 2.7.2; from 2.8.0, fixed in 2.8.1.

### [CVE-2022-29195](https://cve.now/CVE-2022-29195): Missing validation causes denial of service in TensorFlow via \`StagePeek\`

- Severity: Medium 5.5
- Published: May 20, 2022
- Affected: fixed in 2.6.4; from 2.7.0, fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; fixed in 2.6.4; from 2.7.0, fixed in 2.7.2; from 2.8.0, fixed in 2.8.1.

### [CVE-2022-29197](https://cve.now/CVE-2022-29197): Missing validation causes denial of service in TensorFlow via \`UnsortedSegmentJoin\`

- Severity: Medium 5.5
- Published: May 20, 2022
- Affected: fixed in 2.6.4; from 2.7.0, fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; fixed in 2.6.4; from 2.7.0, fixed in 2.7.2; from 2.8.0, fixed in 2.8.1.

### [CVE-2022-29196](https://cve.now/CVE-2022-29196): Missing validation causes denial of service in TensorFlow via \`Conv3DBackpropFilterV2\`

- Severity: Medium 5.5
- Published: May 20, 2022
- Affected: fixed in 2.6.4; from 2.7.0, fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; fixed in 2.6.4; from 2.7.0, fixed in 2.7.2; from 2.8.0, fixed in 2.8.1.

### [CVE-2022-29198](https://cve.now/CVE-2022-29198): Missing validation causes denial of service in TensorFlow via \`SparseTensorToCSRSparseMatrix\`

- Severity: Medium 5.5
- Published: May 20, 2022
- Affected: fixed in 2.6.4; from 2.7.0, fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; fixed in 2.6.4; from 2.7.0, fixed in 2.7.2; from 2.8.0, fixed in 2.8.1.

### [CVE-2022-29199](https://cve.now/CVE-2022-29199): Missing validation causes denial of service in TensorFlow via \`LoadAndRemapMatrix\`

- Severity: Medium 5.5
- Published: May 20, 2022
- Affected: fixed in 2.6.4; from 2.7.0, fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; fixed in 2.6.4; from 2.7.0, fixed in 2.7.2; from 2.8.0, fixed in 2.8.1.

### [CVE-2022-29200](https://cve.now/CVE-2022-29200): Missing validation causes denial of service in TensorFlow via \`LSTMBlockCell\`

- Severity: Medium 5.5
- Published: May 20, 2022
- Affected: fixed in 2.6.4; from 2.7.0, fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; fixed in 2.6.4; from 2.7.0, fixed in 2.7.2; from 2.8.0, fixed in 2.8.1.

### [CVE-2022-29193](https://cve.now/CVE-2022-29193): Missing validation causes \`TensorSummaryV2\` in TensorFlow to crash

- Severity: Medium 5.5
- Published: May 20, 2022
- Affected: fixed in 2.6.4; from 2.7.0, fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; fixed in 2.6.4; from 2.7.0, fixed in 2.7.2; from 2.8.0, fixed in 2.8.1.

### [CVE-2022-29194](https://cve.now/CVE-2022-29194): Missing validation causes denial of service via \`DeleteSessionTensor\` in TensorFlow

- Severity: Medium 5.5
- Published: May 20, 2022
- Affected: fixed in 2.6.4; from 2.7.0, fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; fixed in 2.6.4; from 2.7.0, fixed in 2.7.2; from 2.8.0, fixed in 2.8.1.

### [CVE-2022-29191](https://cve.now/CVE-2022-29191): Missing validation causes denial of service via \`GetSessionTensor\` in TensorFlow

- Severity: Medium 5.5
- Published: May 20, 2022
- Affected: fixed in 2.6.4; from 2.7.0, fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; fixed in 2.6.4; from 2.7.0, fixed in 2.7.2; from 2.8.0, fixed in 2.8.1.

### [CVE-2022-29192](https://cve.now/CVE-2022-29192): Missing validation crashes \`QuantizeAndDequantizeV4Grad\` in TensorFlow

- Severity: Medium 5.5
- Published: May 20, 2022
- Affected: fixed in 2.6.4; from 2.7.0, fixed in 2.7.2; from 2.8.0, fixed in 2.8.1; fixed in 2.6.4; from 2.7.0, fixed in 2.7.2; from 2.8.0, fixed in 2.8.1.

### [CVE-2022-23561](https://cve.now/CVE-2022-23561): Out of bounds write in TFLite

- Severity: High 8.8
- Published: Feb 4, 2022
- Affected: fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; from 2.7.0, fixed in 2.7.1; fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; from 2.7.0, fixed in 2.7.1.

### [CVE-2022-23557](https://cve.now/CVE-2022-23557): Division by zero in TFLite

- Severity: Medium 6.5
- Published: Feb 4, 2022
- Affected: fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; from 2.7.0, fixed in 2.7.1; fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; from 2.7.0, fixed in 2.7.1.

### [CVE-2022-23558](https://cve.now/CVE-2022-23558): Integer overflow in TFLite array creation

- Severity: High 7.6
- Published: Feb 4, 2022
- Affected: fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; from 2.7.0, fixed in 2.7.1; fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; from 2.7.0, fixed in 2.7.1.

### [CVE-2022-23570](https://cve.now/CVE-2022-23570): Null-dereference in Tensorflow

- Severity: Medium 6.5
- Published: Feb 4, 2022
- Affected: fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; from 2.7.0, fixed in 2.7.1; fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; from 2.7.0, fixed in 2.7.1.

### [CVE-2022-23564](https://cve.now/CVE-2022-23564): Reachable Assertion in Tensorflow

- Severity: Medium 6.5
- Published: Feb 4, 2022
- Affected: fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; from 2.7.0, fixed in 2.7.1; fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; from 2.7.0, fixed in 2.7.1.

### [CVE-2022-23565](https://cve.now/CVE-2022-23565): \`CHECK\`-failures in Tensorflow

- Severity: Medium 6.5
- Published: Feb 4, 2022
- Affected: fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; from 2.7.0, fixed in 2.7.1; fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; from 2.7.0, fixed in 2.7.1.

### [CVE-2022-23562](https://cve.now/CVE-2022-23562): Integer overflow in Tensorflow

- Severity: High 7.6
- Published: Feb 4, 2022
- Affected: fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; from 2.7.0, fixed in 2.7.1; fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; from 2.7.0, fixed in 2.7.1.

### [CVE-2022-23563](https://cve.now/CVE-2022-23563): Insecure temporary file in Tensorflow

- Severity: High 7.1
- Published: Feb 4, 2022
- Affected: fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; from 2.7.0, fixed in 2.7.1; fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; from 2.7.0, fixed in 2.7.1.

### [CVE-2022-23559](https://cve.now/CVE-2022-23559): Integer overflow in TFLite

- Severity: High 8.8
- Published: Feb 4, 2022
- Affected: fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; from 2.7.0, fixed in 2.7.1; fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; from 2.7.0, fixed in 2.7.1.

### [CVE-2022-23560](https://cve.now/CVE-2022-23560): Read and Write outside of bounds in TFLite

- Severity: High 8.8
- Published: Feb 4, 2022
- Affected: fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; from 2.7.0, fixed in 2.7.1; fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; from 2.7.0, fixed in 2.7.1.

### [CVE-2022-23574](https://cve.now/CVE-2022-23574): Out of bounds read and write in Tensorflow

- Severity: High 8.8
- Published: Feb 4, 2022
- Affected: fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; from 2.7.0, fixed in 2.7.1; fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; from 2.7.0, fixed in 2.7.1.

### [CVE-2022-23571](https://cve.now/CVE-2022-23571): Reachable Assertion in Tensorflow

- Severity: Medium 6.5
- Published: Feb 4, 2022
- Affected: fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; from 2.7.0, fixed in 2.7.1; fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; from 2.7.0, fixed in 2.7.1.

### [CVE-2022-23566](https://cve.now/CVE-2022-23566): Out of bounds write in Tensorflow

- Severity: High 8.8
- Published: Feb 4, 2022
- Affected: fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; from 2.7.0, fixed in 2.7.1; fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; from 2.7.0, fixed in 2.7.1.

### [CVE-2022-23577](https://cve.now/CVE-2022-23577): Null-dereference in Tensorflow

- Severity: Medium 6.5
- Published: Feb 4, 2022
- Affected: fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; from 2.7.0, fixed in 2.7.1; fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; from 2.7.0, fixed in 2.7.1.

### [CVE-2022-23578](https://cve.now/CVE-2022-23578): Memory leak in Tensorflow

- Severity: Medium 4.3
- Published: Feb 4, 2022
- Affected: fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; from 2.7.0, fixed in 2.7.1; fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; from 2.7.0, fixed in 2.7.1.

### [CVE-2022-23572](https://cve.now/CVE-2022-23572): Crash when type cannot be specialized in Tensorflow

- Severity: Medium 6.5
- Published: Feb 4, 2022
- Affected: fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; from 2.7.0, fixed in 2.7.1; fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; from 2.7.0, fixed in 2.7.1.

### [CVE-2022-23573](https://cve.now/CVE-2022-23573): Uninitialized variable access in Tensorflow

- Severity: High 7.6
- Published: Feb 4, 2022
- Affected: fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; from 2.7.0, fixed in 2.7.1; fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; from 2.7.0, fixed in 2.7.1.

### [CVE-2022-23585](https://cve.now/CVE-2022-23585): Memory leak in decoding PNG images in Tensorflow

- Severity: Medium 4.3
- Published: Feb 4, 2022
- Affected: fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; from 2.7.0, fixed in 2.7.1; fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; from 2.7.0, fixed in 2.7.1.

### [CVE-2022-23579](https://cve.now/CVE-2022-23579): \`CHECK\`-failures during Grappler's \`SafeToRemoveIdentity\` in Tensorflow

- Severity: Medium 6.5
- Published: Feb 4, 2022
- Affected: fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; from 2.7.0, fixed in 2.7.1; fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; from 2.7.0, fixed in 2.7.1.

### [CVE-2022-23580](https://cve.now/CVE-2022-23580): Abort caused by allocating a vector that is too large in Tensorflow

- Severity: Medium 6.5
- Published: Feb 4, 2022
- Affected: fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; from 2.7.0, fixed in 2.7.1; fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; from 2.7.0, fixed in 2.7.1.

### [CVE-2022-23581](https://cve.now/CVE-2022-23581): \`CHECK\`-failures during Grappler's \`IsSimplifiableReshape\` in Tensorflow

- Severity: Medium 6.5
- Published: Feb 4, 2022
- Affected: fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; from 2.7.0, fixed in 2.7.1; fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; from 2.7.0, fixed in 2.7.1.

### [CVE-2022-23575](https://cve.now/CVE-2022-23575): Integer overflow in Tensorflow

- Severity: Medium 6.5
- Published: Feb 4, 2022
- Affected: fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; from 2.7.0, fixed in 2.7.1; fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; from 2.7.0, fixed in 2.7.1.

### [CVE-2022-23576](https://cve.now/CVE-2022-23576): Integer overflow in Tensorflow

- Severity: Medium 6.5
- Published: Feb 4, 2022
- Affected: fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; from 2.7.0, fixed in 2.7.1; fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; from 2.7.0, fixed in 2.7.1.

### [CVE-2022-23588](https://cve.now/CVE-2022-23588): \`CHECK\`-fails due to attempting to build a reference tensor in Tensorflow

- Severity: Medium 6.5
- Published: Feb 4, 2022
- Affected: fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; from 2.7.0, fixed in 2.7.1; fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; from 2.7.0, fixed in 2.7.1.

### [CVE-2022-23589](https://cve.now/CVE-2022-23589): Null pointer dereference in Grappler's \`IsConstant\` in Tensorflow

- Severity: Medium 6.5
- Published: Feb 4, 2022
- Affected: fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; from 2.7.0, fixed in 2.7.1; fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; from 2.7.0, fixed in 2.7.1.

### [CVE-2022-23586](https://cve.now/CVE-2022-23586): Multiple \`CHECK\`-fails in \`function.cc\` in Tensorflow

- Severity: Medium 6.5
- Published: Feb 4, 2022
- Affected: fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; from 2.7.0, fixed in 2.7.1; fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; from 2.7.0, fixed in 2.7.1.

### [CVE-2022-23583](https://cve.now/CVE-2022-23583): \`CHECK\`-failures in binary ops in Tensorflow

- Severity: Medium 6.5
- Published: Feb 4, 2022
- Affected: fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; from 2.7.0, fixed in 2.7.1; fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; from 2.7.0, fixed in 2.7.1.

### [CVE-2022-23582](https://cve.now/CVE-2022-23582): \`CHECK\`-failures in \`TensorByteSize\` in Tensorflow

- Severity: Medium 6.5
- Published: Feb 4, 2022
- Affected: fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; from 2.7.0, fixed in 2.7.1; fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; from 2.7.0, fixed in 2.7.1.

### [CVE-2022-23584](https://cve.now/CVE-2022-23584): Use after free in \`DecodePng\` in Tensorflow

- Severity: High 7.6
- Published: Feb 4, 2022
- Affected: fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; from 2.7.0, fixed in 2.7.1; fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; from 2.7.0, fixed in 2.7.1.

### [CVE-2022-23592](https://cve.now/CVE-2022-23592): Out of bounds read in Tensorflow

- Severity: High 8.1
- Published: Feb 4, 2022
- Affected: from 2.8.0-rc0, fixed in 2.8.0.

### [CVE-2022-23587](https://cve.now/CVE-2022-23587): Integer overflow in Tensorflow

- Severity: High 8.8
- Published: Feb 4, 2022
- Affected: fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; from 2.7.0, fixed in 2.7.1; fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; from 2.7.0, fixed in 2.7.1.

### [CVE-2022-23595](https://cve.now/CVE-2022-23595): Null pointer dereference in TensorFlow

- Severity: Medium 5.3
- Published: Feb 4, 2022
- Affected: fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; from 2.7.0, fixed in 2.7.1; fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; from 2.7.0, fixed in 2.7.1.

### [CVE-2022-23594](https://cve.now/CVE-2022-23594): Out of bounds read in Tensorflow

- Severity: High 8.8
- Published: Feb 4, 2022
- Affected: from 2.7.0, fixed in 2.7.1.

### [CVE-2022-23590](https://cve.now/CVE-2022-23590): Crash due to erroneous \`StatusOr\` in Tensorflow

- Severity: Medium 5.9
- Published: Feb 4, 2022
- Affected: fixed in 2.7.1.

### [CVE-2022-23591](https://cve.now/CVE-2022-23591): Stack overflow in Tensorflow

- Severity: High 7.5
- Published: Feb 4, 2022
- Affected: fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; from 2.7.0, fixed in 2.7.1; fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; from 2.7.0, fixed in 2.7.1.

### [CVE-2022-23593](https://cve.now/CVE-2022-23593): Segfault in \`simplifyBroadcast\` in Tensorflow

- Severity: Medium 5.9
- Published: Feb 4, 2022
- Affected: from 2.8.0-rc0, fixed in 2.8.0.

### [CVE-2022-21740](https://cve.now/CVE-2022-21740): Heap overflow in Tensorflow

- Severity: High 7.6
- Published: Feb 3, 2022
- Affected: fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; from 2.7.0, fixed in 2.7.1; fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; from 2.7.0, fixed in 2.7.1.

### [CVE-2022-21741](https://cve.now/CVE-2022-21741): Division by zero in TFLite

- Severity: Medium 6.5
- Published: Feb 3, 2022
- Affected: fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; from 2.7.0, fixed in 2.7.1; fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; from 2.7.0, fixed in 2.7.1.

### [CVE-2022-21737](https://cve.now/CVE-2022-21737): Assertion failure based denial of service in Tensorflow

- Severity: Medium 6.5
- Published: Feb 3, 2022
- Affected: fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; from 2.7.0, fixed in 2.7.1; fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; from 2.7.0, fixed in 2.7.1.

### [CVE-2022-21738](https://cve.now/CVE-2022-21738): Integer overflow leading to crash in Tensorflow

- Severity: Medium 6.5
- Published: Feb 3, 2022
- Affected: fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; from 2.7.0, fixed in 2.7.1; fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; from 2.7.0, fixed in 2.7.1.

### [CVE-2022-21739](https://cve.now/CVE-2022-21739): Null pointer dereference in TensorFlow

- Severity: Medium 6.5
- Published: Feb 3, 2022
- Affected: fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; from 2.7.0, fixed in 2.7.1; fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; from 2.7.0, fixed in 2.7.1.

### [CVE-2022-21734](https://cve.now/CVE-2022-21734): \`CHECK\`-failures in Tensorflow

- Severity: Medium 6.5
- Published: Feb 3, 2022
- Affected: fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; from 2.7.0, fixed in 2.7.1; fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; from 2.7.0, fixed in 2.7.1.

### [CVE-2022-21735](https://cve.now/CVE-2022-21735): Division by zero in Tensorflow

- Severity: Medium 6.5
- Published: Feb 3, 2022
- Affected: fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; from 2.7.0, fixed in 2.7.1; fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; from 2.7.0, fixed in 2.7.1.

### [CVE-2022-23569](https://cve.now/CVE-2022-23569): \`CHECK\`-fails when building invalid tensor shapes in Tensorflow

- Severity: Medium 6.5
- Published: Feb 3, 2022
- Affected: fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; from 2.7.0, fixed in 2.7.1; fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; from 2.7.0, fixed in 2.7.1.

### [CVE-2022-21729](https://cve.now/CVE-2022-21729): Overflow and uncaught divide by zero in Tensorflow

- Severity: Medium 6.5
- Published: Feb 3, 2022
- Affected: fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; from 2.7.0, fixed in 2.7.1; fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; from 2.7.0, fixed in 2.7.1.

### [CVE-2022-21725](https://cve.now/CVE-2022-21725): Division by zero in Tensorflow

- Severity: Medium 6.5
- Published: Feb 3, 2022
- Affected: fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; from 2.7.0, fixed in 2.7.1; fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; from 2.7.0, fixed in 2.7.1.

### [CVE-2022-21736](https://cve.now/CVE-2022-21736): Undefined behavior in Tensorflow

- Severity: High 7.6
- Published: Feb 3, 2022
- Affected: fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; from 2.7.0, fixed in 2.7.1; fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; from 2.7.0, fixed in 2.7.1.

### [CVE-2022-23567](https://cve.now/CVE-2022-23567): Integer overflows in Tensorflow

- Severity: Medium 6.5
- Published: Feb 3, 2022
- Affected: fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; from 2.7.0, fixed in 2.7.1; fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; from 2.7.0, fixed in 2.7.1.

### [CVE-2022-23568](https://cve.now/CVE-2022-23568): Integer overflows in Tensorflow

- Severity: Medium 6.5
- Published: Feb 3, 2022
- Affected: fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; from 2.7.0, fixed in 2.7.1; fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; from 2.7.0, fixed in 2.7.1.

### [CVE-2022-21731](https://cve.now/CVE-2022-21731): Type confusion leading to segfault in Tensorflow

- Severity: Medium 6.5
- Published: Feb 3, 2022
- Affected: fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; from 2.7.0, fixed in 2.7.1; fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; from 2.7.0, fixed in 2.7.1.

### [CVE-2022-21733](https://cve.now/CVE-2022-21733): Memory exhaustion in Tensorflow

- Severity: Medium 4.3
- Published: Feb 3, 2022
- Affected: fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; from 2.7.0, fixed in 2.7.1; fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; from 2.7.0, fixed in 2.7.1.

### [CVE-2022-21732](https://cve.now/CVE-2022-21732): Memory exhaustion in Tensorflow

- Severity: Medium 4.3
- Published: Feb 3, 2022
- Affected: fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; from 2.7.0, fixed in 2.7.1; fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; from 2.7.0, fixed in 2.7.1.

### [CVE-2022-21727](https://cve.now/CVE-2022-21727): Integer overflow in Tensorflow

- Severity: High 7.6
- Published: Feb 3, 2022
- Affected: fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; from 2.7.0, fixed in 2.7.1; fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; from 2.7.0, fixed in 2.7.1.

### [CVE-2022-21726](https://cve.now/CVE-2022-21726): Out of bounds read in Tensorflow

- Severity: High 8.1
- Published: Feb 3, 2022
- Affected: fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; from 2.7.0, fixed in 2.7.1; fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; from 2.7.0, fixed in 2.7.1.

### [CVE-2022-21728](https://cve.now/CVE-2022-21728): Out of bounds read in Tensorflow

- Severity: High 8.1
- Published: Feb 3, 2022
- Affected: fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; from 2.7.0, fixed in 2.7.1; fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; from 2.7.0, fixed in 2.7.1.

### [CVE-2022-21730](https://cve.now/CVE-2022-21730): Out of bounds read in Tensorflow

- Severity: High 8.1
- Published: Feb 3, 2022
- Affected: fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; from 2.7.0, fixed in 2.7.1; fixed in 2.5.3; from 2.6.0, fixed in 2.6.3; from 2.7.0, fixed in 2.7.1.

### [CVE-2021-41227](https://cve.now/CVE-2021-41227): Arbitrary memory read in \`ImmutableConst\`

- Severity: Medium 6.6
- Published: Nov 5, 2021
- Affected: fixed in 2.4.4; from 2.5.0, fixed in 2.5.2; from 2.6.0, fixed in 2.6.1; from 2.7.0rc0, fixed in 2.7.0; from 2.6.0, fixed in 2.6.1; from 2.5.0, fixed in 2.5.2; fixed in 2.4.4.

### [CVE-2021-41225](https://cve.now/CVE-2021-41225): A use of uninitialized value vulnerability in Tensorflow

- Severity: Medium 5.5
- Published: Nov 5, 2021
- Affected: from 2.6.0, fixed in 2.6.1; from 2.5.0, fixed in 2.5.2; fixed in 2.4.4; fixed in 2.4.4; from 2.5.0, fixed in 2.5.2; from 2.6.0, fixed in 2.6.1; from 2.7.0rc0, fixed in 2.7.0.

### [CVE-2021-41222](https://cve.now/CVE-2021-41222): Segfault due to negative splits in \`SplitV\`

- Severity: Medium 5.5
- Published: Nov 5, 2021
- Affected: from 2.6.0, fixed in 2.6.1; from 2.5.0, fixed in 2.5.2; fixed in 2.4.4; fixed in 2.4.4; from 2.5.0, fixed in 2.5.2; from 2.6.0, fixed in 2.6.1; from 2.7.0rc0, fixed in 2.7.0.

### [CVE-2021-41228](https://cve.now/CVE-2021-41228): Code injection in \`saved\_model\_cli\`

- Severity: High 7.5
- Published: Nov 5, 2021
- Affected: fixed in 2.4.4; from 2.5.0, fixed in 2.5.2; from 2.6.0, fixed in 2.6.1; from 2.7.0rc0, fixed in 2.7.0; from 2.5.0, fixed in 2.5.2; fixed in 2.4.4; from 2.6.0, fixed in 2.6.1.

### [CVE-2021-41220](https://cve.now/CVE-2021-41220): Use after free in \`CollectiveReduceV2\`

- Severity: High 7.8
- Published: Nov 5, 2021
- Affected: from 2.6.0, fixed in 2.6.1; from 2.7.0rc0, fixed in 2.7.0; from 2.6.0, fixed in 2.6.1.

### [CVE-2021-41221](https://cve.now/CVE-2021-41221): Access to invalid memory during shape inference in \`Cudnn\*\` ops

- Severity: High 7.8
- Published: Nov 5, 2021
- Affected: fixed in 2.4.4; from 2.5.0, fixed in 2.5.2; from 2.6.0, fixed in 2.6.1; from 2.7.0rc0, fixed in 2.7.0; from 2.6.0, fixed in 2.6.1; from 2.5.0, fixed in 2.5.2; fixed in 2.4.4.

### [CVE-2021-41216](https://cve.now/CVE-2021-41216): Heap buffer overflow in \`Transpose\`

- Severity: Medium 5.5
- Published: Nov 5, 2021
- Affected: fixed in 2.4.4; from 2.5.0, fixed in 2.5.2; from 2.6.0, fixed in 2.6.1; from 2.7.0rc0, fixed in 2.7.0; from 2.6.0, fixed in 2.6.1; from 2.5.0, fixed in 2.5.2; fixed in 2.4.4.

### [CVE-2021-41213](https://cve.now/CVE-2021-41213): Deadlock in mutually recursive \`tf.function\` objects

- Severity: Medium 5.5
- Published: Nov 5, 2021
- Affected: fixed in 2.4.4; from 2.5.0, fixed in 2.5.2; from 2.6.0, fixed in 2.6.1; from 2.7.0rc0, fixed in 2.7.0; from 2.6.0, fixed in 2.6.1; from 2.5.0, fixed in 2.5.2; fixed in 2.4.4.

### [CVE-2021-41218](https://cve.now/CVE-2021-41218): Integer division by 0 in \`tf.raw\_ops.AllToAll\`

- Severity: Medium 5.5
- Published: Nov 5, 2021
- Affected: fixed in 2.4.4; from 2.5.0, fixed in 2.5.2; from 2.6.0, fixed in 2.6.1; from 2.7.0rc0, fixed in 2.7.0; from 2.6.0, fixed in 2.6.1; from 2.5.0, fixed in 2.5.2; fixed in 2.4.4.

### [CVE-2021-41206](https://cve.now/CVE-2021-41206): Incomplete validation of shapes in multiple TF ops

- Severity: High 7.0
- Published: Nov 5, 2021
- Affected: fixed in 2.4.4; from 2.5.0, fixed in 2.5.2; from 2.6.0, fixed in 2.6.1; from 2.6.0, fixed in 2.6.1; from 2.5.0, fixed in 2.5.2; fixed in 2.4.4.

### [CVE-2021-41208](https://cve.now/CVE-2021-41208): Incomplete validation in boosted trees code

- Severity: High 8.8
- Published: Nov 5, 2021
- Affected: from 2.6.0, fixed in 2.6.1; from 2.5.0, fixed in 2.5.2; fixed in 2.4.4; fixed in 2.4.4; from 2.5.0, fixed in 2.5.2; from 2.6.0, fixed in 2.6.1; from 2.7.0rc0, fixed in 2.7.0.

### [CVE-2021-41207](https://cve.now/CVE-2021-41207): Division by zero in \`ParallelConcat\`

- Severity: Medium 5.5
- Published: Nov 5, 2021
- Affected: fixed in 2.4.4; from 2.5.0, fixed in 2.5.2; from 2.6.0, fixed in 2.6.1; from 2.7.0rc0, fixed in 2.7.0; from 2.6.0, fixed in 2.6.1; from 2.5.0, fixed in 2.5.2; fixed in 2.4.4.

### [CVE-2021-41202](https://cve.now/CVE-2021-41202): Overflow/crash in \`tf.range\`

- Severity: Medium 5.5
- Published: Nov 5, 2021
- Affected: from 2.6.0, fixed in 2.6.1; from 2.5.0, fixed in 2.5.2; fixed in 2.4.4; fixed in 2.4.4; from 2.5.0, fixed in 2.5.2; from 2.6.0, fixed in 2.6.1; from 2.7.0rc0, fixed in 2.7.0.

### [CVE-2021-41209](https://cve.now/CVE-2021-41209): FPE in convolutions with zero size filters

- Severity: Medium 5.5
- Published: Nov 5, 2021
- Affected: fixed in 2.4.4; from 2.5.0, fixed in 2.5.2; from 2.6.0, fixed in 2.6.1; from 2.7.0rc0, fixed in 2.7.0; from 2.6.0, fixed in 2.6.1; from 2.5.0, fixed in 2.5.2; fixed in 2.4.4.

### [CVE-2021-41203](https://cve.now/CVE-2021-41203): Missing validation during checkpoint loading

- Severity: High 7.8
- Published: Nov 5, 2021
- Affected: fixed in 2.4.4; from 2.5.0, fixed in 2.5.2; from 2.6.0, fixed in 2.6.1; from 2.7.0rc0, fixed in 2.7.0; from 2.6.0, fixed in 2.6.1; from 2.5.0, fixed in 2.5.2; fixed in 2.4.4.

### [CVE-2021-41215](https://cve.now/CVE-2021-41215): Null pointer exception in \`DeserializeSparse\`

- Severity: Medium 5.5
- Published: Nov 5, 2021
- Affected: from 2.6.0, fixed in 2.6.1; from 2.5.0, fixed in 2.5.2; fixed in 2.4.4; fixed in 2.4.4; from 2.5.0, fixed in 2.5.2; from 2.6.0, fixed in 2.6.1; from 2.7.0rc0, fixed in 2.7.0.

### [CVE-2021-41217](https://cve.now/CVE-2021-41217): Null pointer exception when \`Exit\` node is not preceded by \`Enter\` op

- Severity: Medium 5.5
- Published: Nov 5, 2021
- Affected: from 2.6.0, fixed in 2.6.1; from 2.5.0, fixed in 2.5.2; fixed in 2.4.4; fixed in 2.4.4; from 2.5.0, fixed in 2.5.2; from 2.6.0, fixed in 2.6.1; from 2.7.0rc0, fixed in 2.7.0.

### [CVE-2021-41219](https://cve.now/CVE-2021-41219): Undefined behavior via \`nullptr\` reference binding in sparse matrix multiplication

- Severity: High 7.8
- Published: Nov 5, 2021
- Affected: fixed in 2.4.4; from 2.5.0, fixed in 2.5.2; from 2.6.0, fixed in 2.6.1; from 2.7.0rc0, fixed in 2.7.0; from 2.6.0, fixed in 2.6.1; from 2.5.0, fixed in 2.5.2; fixed in 2.4.4.

### [CVE-2021-41214](https://cve.now/CVE-2021-41214): Reference binding to \`nullptr\` in \`tf.ragged.cross\`

- Severity: High 7.8
- Published: Nov 5, 2021
- Affected: fixed in 2.4.4; from 2.5.0, fixed in 2.5.2; from 2.6.0, fixed in 2.6.1; from 2.7.0rc0, fixed in 2.7.0; from 2.6.0, fixed in 2.6.1; from 2.5.0, fixed in 2.5.2; fixed in 2.4.4.

### [CVE-2021-41204](https://cve.now/CVE-2021-41204): Segfault while copying constant resource tensor

- Severity: Medium 5.5
- Published: Nov 5, 2021
- Affected: from 2.6.0, fixed in 2.6.1; from 2.5.0, fixed in 2.5.2; fixed in 2.4.4; fixed in 2.4.4; from 2.5.0, fixed in 2.5.2; from 2.6.0, fixed in 2.6.1; from 2.7.0rc0, fixed in 2.7.0.

### [CVE-2021-41226](https://cve.now/CVE-2021-41226): Heap OOB read in \`SparseBinCount\`

- Severity: High 7.1
- Published: Nov 5, 2021
- Affected: from 2.6.0, fixed in 2.6.1; from 2.5.0, fixed in 2.5.2; fixed in 2.4.4; fixed in 2.4.4; from 2.5.0, fixed in 2.5.2; from 2.6.0, fixed in 2.6.1; from 2.7.0rc0, fixed in 2.7.0.

### [CVE-2021-41223](https://cve.now/CVE-2021-41223): Heap OOB read in \`FusedBatchNorm\` kernels

- Severity: High 7.1
- Published: Nov 5, 2021
- Affected: fixed in 2.4.4; from 2.5.0, fixed in 2.5.2; from 2.6.0, fixed in 2.6.1; from 2.7.0rc0, fixed in 2.7.0; from 2.6.0, fixed in 2.6.1; from 2.5.0, fixed in 2.5.2; fixed in 2.4.4.

### [CVE-2021-41224](https://cve.now/CVE-2021-41224): \`SparseFillEmptyRows\` heap OOB read

- Severity: High 7.1
- Published: Nov 5, 2021
- Affected: from 2.6.0, fixed in 2.6.1; from 2.5.0, fixed in 2.5.2; fixed in 2.4.4; fixed in 2.4.4; from 2.5.0, fixed in 2.5.2; from 2.6.0, fixed in 2.6.1; from 2.7.0rc0, fixed in 2.7.0.

### [CVE-2021-41212](https://cve.now/CVE-2021-41212): Heap OOB read in \`tf.ragged.cross\`

- Severity: High 7.1
- Published: Nov 5, 2021
- Affected: from 2.6.0, fixed in 2.6.1; from 2.5.0, fixed in 2.5.2; fixed in 2.4.4; fixed in 2.4.4; from 2.5.0, fixed in 2.5.2; from 2.6.0, fixed in 2.6.1; from 2.7.0rc0, fixed in 2.7.0.

### [CVE-2021-41211](https://cve.now/CVE-2021-41211): Heap OOB read in shape inference for \`QuantizeV2\`

- Severity: High 7.1
- Published: Nov 5, 2021
- Affected: from 2.6.0, fixed in 2.6.1; from 2.7.0rc0, fixed in 2.7.0; from 2.6.0, fixed in 2.6.1.

### [CVE-2021-41205](https://cve.now/CVE-2021-41205): Heap OOB read in all \`tf.raw\_ops.QuantizeAndDequantizeV\*\` ops

- Severity: High 7.1
- Published: Nov 5, 2021
- Affected: fixed in 2.4.4; from 2.5.0, fixed in 2.5.2; from 2.6.0, fixed in 2.6.1; from 2.7.0rc0, fixed in 2.7.0; from 2.6.0, fixed in 2.6.1; from 2.5.0, fixed in 2.5.2; fixed in 2.4.4.

### [CVE-2021-41210](https://cve.now/CVE-2021-41210): Heap OOB read in \`tf.raw\_ops.SparseCountSparseOutput\`

- Severity: High 7.1
- Published: Nov 5, 2021
- Affected: from 2.6.0, fixed in 2.6.1; from 2.5.0, fixed in 2.5.2; fixed in 2.4.4; fixed in 2.4.4; from 2.5.0, fixed in 2.5.2; from 2.6.0, fixed in 2.6.1; from 2.7.0rc0, fixed in 2.7.0.

### [CVE-2021-41201](https://cve.now/CVE-2021-41201): Unitialized access in \`EinsumHelper::ParseEquation\`

- Severity: High 7.8
- Published: Nov 5, 2021
- Affected: fixed in 2.4.4; from 2.5.0, fixed in 2.5.2; from 2.6.0, fixed in 2.6.1; from 2.7.0rc0, fixed in 2.7.0; from 2.6.0, fixed in 2.6.1; from 2.5.0, fixed in 2.5.2; fixed in 2.4.4.

### [CVE-2021-41200](https://cve.now/CVE-2021-41200): Incomplete validation in \`tf.summary.create\_file\_writer\`

- Severity: Medium 5.5
- Published: Nov 5, 2021
- Affected: from 2.6.0, fixed in 2.6.1; from 2.5.0, fixed in 2.5.2; fixed in 2.4.4; fixed in 2.4.4; from 2.5.0, fixed in 2.5.2; from 2.6.0, fixed in 2.6.1; from 2.7.0rc0, fixed in 2.7.0.

### [CVE-2021-41197](https://cve.now/CVE-2021-41197): Crashes due to overflow and \`CHECK\`-fail in ops with large tensor shapes

- Severity: Medium 5.5
- Published: Nov 5, 2021
- Affected: fixed in 2.4.4; from 2.5.0, fixed in 2.5.2; from 2.6.0, fixed in 2.6.1; from 2.7.0rc0, fixed in 2.7.0; from 2.6.0, fixed in 2.6.1; from 2.5.0, fixed in 2.5.2; fixed in 2.4.4.

### [CVE-2021-41198](https://cve.now/CVE-2021-41198): Overflow/crash in \`tf.tile\` when tiling tensor is large

- Severity: Medium 5.5
- Published: Nov 5, 2021
- Affected: from 2.6.0, fixed in 2.6.1; from 2.5.0, fixed in 2.5.2; fixed in 2.4.4; fixed in 2.4.4; from 2.5.0, fixed in 2.5.2; from 2.6.0, fixed in 2.6.1; from 2.7.0rc0, fixed in 2.7.0.

### [CVE-2021-41199](https://cve.now/CVE-2021-41199): Overflow/crash in \`tf.image.resize\` when size is large

- Severity: Medium 5.5
- Published: Nov 5, 2021
- Affected: from 2.6.0, fixed in 2.6.1; from 2.5.0, fixed in 2.5.2; fixed in 2.4.4; fixed in 2.4.4; from 2.5.0, fixed in 2.5.2; from 2.6.0, fixed in 2.6.1; from 2.7.0rc0, fixed in 2.7.0.

### [CVE-2021-41196](https://cve.now/CVE-2021-41196): Crash in \`max\_pool3d\` when size argument is 0 or negative

- Severity: Medium 5.5
- Published: Nov 5, 2021
- Affected: fixed in 2.4.4; from 2.5.0, fixed in 2.5.2; from 2.6.0, fixed in 2.6.1; from 2.7.0rc0, fixed in 2.7.0; from 2.6.0, fixed in 2.6.1; from 2.5.0, fixed in 2.5.2; fixed in 2.4.4.

### [CVE-2021-41195](https://cve.now/CVE-2021-41195): Crash in \`tf.math.segment\_\*\` operations

- Severity: Medium 5.5
- Published: Nov 5, 2021
- Affected: from 2.6.0, fixed in 2.6.1; from 2.5.0, fixed in 2.5.2; fixed in 2.4.4; fixed in 2.4.4; from 2.5.0, fixed in 2.5.2; from 2.6.0, fixed in 2.6.1.

### [CVE-2021-37690](https://cve.now/CVE-2021-37690): Use after free and segfault in shape inference functions in TensorFlow

- Severity: Medium 6.6
- Published: Aug 12, 2021
- Affected: fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; from 2.5.0, fixed in 2.5.1; from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3.

### [CVE-2021-37678](https://cve.now/CVE-2021-37678): Arbitrary code execution due to YAML deserialization

- Severity: Critical 9.3
- Published: Aug 12, 2021
- Affected: from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; from 2.5.0, fixed in 2.5.1.

### [CVE-2021-37692](https://cve.now/CVE-2021-37692): Segfault on strings tensors with mistmatched dimensions in TensorFlow

- Severity: Medium 5.5
- Published: Aug 12, 2021
- Affected: from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; from 2.5.0rc0, fixed in 2.5.1.

### [CVE-2021-37669](https://cve.now/CVE-2021-37669): Crash in NMS ops caused by integer conversion to unsigned in TensorFlow

- Severity: Medium 5.5
- Published: Aug 12, 2021
- Affected: fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; from 2.5.0, fixed in 2.5.1; from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3.

### [CVE-2021-37673](https://cve.now/CVE-2021-37673): \`CHECK\`-fail in \`MapStage\` in TensorFlow

- Severity: Medium 5.5
- Published: Aug 12, 2021
- Affected: fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; from 2.5.0, fixed in 2.5.1; from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3.

### [CVE-2021-37663](https://cve.now/CVE-2021-37663): Incomplete validation in \`QuantizeV2\` in TensorFlow

- Severity: High 7.8
- Published: Aug 12, 2021
- Affected: fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; from 2.5.0, fixed in 2.5.1; from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3.

### [CVE-2021-37682](https://cve.now/CVE-2021-37682): Use of unitialized value in TensorFlow Lite

- Severity: Medium 4.4
- Published: Aug 12, 2021
- Affected: from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; from 2.5.0, fixed in 2.5.1.

### [CVE-2021-37674](https://cve.now/CVE-2021-37674): Incomplete validation in \`MaxPoolGrad\` in TensorFlow

- Severity: Medium 5.5
- Published: Aug 12, 2021
- Affected: from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; from 2.5.0, fixed in 2.5.1.

### [CVE-2021-37665](https://cve.now/CVE-2021-37665): Incomplete validation in MKL requantization in TensorFlow

- Severity: High 7.8
- Published: Aug 12, 2021
- Affected: fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; from 2.5.0, fixed in 2.5.1; from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3.

### [CVE-2021-37677](https://cve.now/CVE-2021-37677): Missing validation in shape inference for \`Dequantize\` in TensorFlow

- Severity: Medium 5.5
- Published: Aug 12, 2021
- Affected: from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; from 2.5.0, fixed in 2.5.1.

### [CVE-2021-37683](https://cve.now/CVE-2021-37683): Division by zero in TensorFlow Lite division operations

- Severity: Medium 5.5
- Published: Aug 12, 2021
- Affected: from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; from 2.5.0, fixed in 2.5.1.

### [CVE-2021-37684](https://cve.now/CVE-2021-37684): Division by zero in TensorFlow Lite pooling operations

- Severity: Medium 5.5
- Published: Aug 12, 2021
- Affected: fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; from 2.5.0, fixed in 2.5.1; from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3.

### [CVE-2021-37668](https://cve.now/CVE-2021-37668): Division by zero in TensorFlow Lite \`tf.raw\_ops.UnravelIndex\`

- Severity: Medium 5.5
- Published: Aug 12, 2021
- Affected: fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; from 2.5.0, fixed in 2.5.1; from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3.

### [CVE-2021-37670](https://cve.now/CVE-2021-37670): Heap OOB in \`UpperBound\` and \`LowerBound\` in TensorFlow

- Severity: Medium 5.5
- Published: Aug 12, 2021
- Affected: fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; from 2.5.0, fixed in 2.5.1; from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3.

### [CVE-2021-37691](https://cve.now/CVE-2021-37691): Division by zero in LSH in TensorFlow Lite

- Severity: Medium 5.5
- Published: Aug 12, 2021
- Affected: fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; from 2.5.0, fixed in 2.5.1; from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3.

### [CVE-2021-37679](https://cve.now/CVE-2021-37679): Heap OOB in nested \`tf.map\_fn\` with \`RaggedTensor\`s in TensorFlow

- Severity: High 7.1
- Published: Aug 12, 2021
- Affected: fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; from 2.5.0, fixed in 2.5.1; from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3.

### [CVE-2021-37672](https://cve.now/CVE-2021-37672): Heap OOB in \`SdcaOptimizerV2\` in TensorFlow

- Severity: Medium 5.5
- Published: Aug 12, 2021
- Affected: fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; from 2.5.0, fixed in 2.5.1; from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3.

### [CVE-2021-37687](https://cve.now/CVE-2021-37687): Heap OOB in TensorFlow Lite's \`Gather\*\` implementations

- Severity: Medium 5.5
- Published: Aug 12, 2021
- Affected: from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; from 2.5.0, fixed in 2.5.1.

### [CVE-2021-37685](https://cve.now/CVE-2021-37685): Heap OOB in TensorFlow Lite

- Severity: Medium 5.5
- Published: Aug 12, 2021
- Affected: fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; from 2.5.0, fixed in 2.5.1; from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3.

### [CVE-2021-37681](https://cve.now/CVE-2021-37681): Null pointer exception in TensorFlow Lite

- Severity: High 7.8
- Published: Aug 12, 2021
- Affected: fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; from 2.5.0, fixed in 2.5.1; from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3.

### [CVE-2021-37689](https://cve.now/CVE-2021-37689): Null pointer dereference in TensorFlow Lite MLIR optimizations

- Severity: High 7.8
- Published: Aug 12, 2021
- Affected: from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; from 2.5.0, fixed in 2.5.1.

### [CVE-2021-37688](https://cve.now/CVE-2021-37688): Null pointer dereference in TensorFlow Lite

- Severity: High 7.8
- Published: Aug 12, 2021
- Affected: from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; from 2.5.0, fixed in 2.5.1.

### [CVE-2021-37686](https://cve.now/CVE-2021-37686): Infinite loop in TensorFlow Lite

- Severity: Medium 5.5
- Published: Aug 12, 2021
- Affected: from 2.6.0rc0, fixed in 2.6.0rc2; from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3.

### [CVE-2021-37680](https://cve.now/CVE-2021-37680): Division by zero in TFLite in TensorFlow

- Severity: Medium 5.5
- Published: Aug 12, 2021
- Affected: fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; from 2.5.0, fixed in 2.5.1; from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3.

### [CVE-2021-37675](https://cve.now/CVE-2021-37675): Division by 0 in most convolution operators in TensorFlow

- Severity: Medium 5.5
- Published: Aug 12, 2021
- Affected: fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; from 2.5.0, fixed in 2.5.1; from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3.

### [CVE-2021-37676](https://cve.now/CVE-2021-37676): Reference binding to nullptr in shape inference in TensorFlow

- Severity: High 7.8
- Published: Aug 12, 2021
- Affected: from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; from 2.5.0, fixed in 2.5.1.

### [CVE-2021-37671](https://cve.now/CVE-2021-37671): Reference binding to nullptr in map operations in TensorFlow

- Severity: High 7.8
- Published: Aug 12, 2021
- Affected: from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; from 2.5.0, fixed in 2.5.1.

### [CVE-2021-37666](https://cve.now/CVE-2021-37666): Reference binding to nullptr in \`RaggedTensorToVariant\` in TensorFlow

- Severity: High 7.8
- Published: Aug 12, 2021
- Affected: from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; from 2.5.0, fixed in 2.5.1.

### [CVE-2021-37667](https://cve.now/CVE-2021-37667): Reference binding to nullptr in unicode encoding in TensorFlow

- Severity: High 7.8
- Published: Aug 12, 2021
- Affected: fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; from 2.5.0, fixed in 2.5.1; from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3.

### [CVE-2021-37648](https://cve.now/CVE-2021-37648): Incorrect validation of \`SaveV2\` inputs in TensorFlow

- Severity: High 7.8
- Published: Aug 12, 2021
- Affected: fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; from 2.5.0, fixed in 2.5.1; from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3.

### [CVE-2021-37652](https://cve.now/CVE-2021-37652): Use after free in boosted trees creation in TensorFlow

- Severity: High 7.8
- Published: Aug 12, 2021
- Affected: fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; from 2.5.0, fixed in 2.5.1; from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3.

### [CVE-2021-37646](https://cve.now/CVE-2021-37646): Bad alloc in \`StringNGrams\` caused by integer conversion in TensorFlow

- Severity: Medium 5.5
- Published: Aug 12, 2021
- Affected: fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; from 2.5.0, fixed in 2.5.1; from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3.

### [CVE-2021-37661](https://cve.now/CVE-2021-37661): Crash caused by integer conversion to unsigned in TensorFlow

- Severity: Medium 5.5
- Published: Aug 12, 2021
- Affected: fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; from 2.5.0, fixed in 2.5.1; from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3.

### [CVE-2021-37645](https://cve.now/CVE-2021-37645): Integer overflow due to conversion to unsigned in TensorFlow

- Severity: Medium 5.5
- Published: Aug 12, 2021
- Affected: fixed in 2.4.3; from 2.5.0, fixed in 2.5.1; from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3.

### [CVE-2021-37651](https://cve.now/CVE-2021-37651): Heap buffer overflow in \`FractionalAvgPoolGrad\` in TensorFlow

- Severity: High 7.1
- Published: Aug 12, 2021
- Affected: fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; from 2.5.0, fixed in 2.5.1; from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3.

### [CVE-2021-37650](https://cve.now/CVE-2021-37650): Segfault and heap buffer overflow in \`{Experimental,}DatasetToTFRecord\` in TensorFlow

- Severity: High 7.8
- Published: Aug 12, 2021
- Affected: from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; from 2.5.0, fixed in 2.5.1.

### [CVE-2021-37662](https://cve.now/CVE-2021-37662): Reference binding to nullptr in boosted trees in TensorFlow

- Severity: High 7.1
- Published: Aug 12, 2021
- Affected: fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; from 2.5.0, fixed in 2.5.1; from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3.

### [CVE-2021-37656](https://cve.now/CVE-2021-37656): Reference binding to nullptr in \`RaggedTensorToSparse\` in TensorFlow

- Severity: High 7.1
- Published: Aug 12, 2021
- Affected: fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; from 2.5.0, fixed in 2.5.1; from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3.

### [CVE-2021-37657](https://cve.now/CVE-2021-37657): Reference binding to nullptr in \`MatrixDiagV\*\` ops in TensorFlow

- Severity: High 7.1
- Published: Aug 12, 2021
- Affected: from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; from 2.5.0, fixed in 2.5.1.

### [CVE-2021-37658](https://cve.now/CVE-2021-37658): Reference binding to nullptr in \`MatrixSetDiagV\*\` ops in TensorFlow

- Severity: High 7.1
- Published: Aug 12, 2021
- Affected: fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; from 2.5.0, fixed in 2.5.1; from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3.

### [CVE-2021-37644](https://cve.now/CVE-2021-37644): \`std::abort\` raised from \`TensorListReserve\` in TensorFlow

- Severity: Medium 5.5
- Published: Aug 12, 2021
- Affected: from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; from 2.5.0, fixed in 2.5.1.

### [CVE-2021-37654](https://cve.now/CVE-2021-37654): Heap OOB and CHECK fail in \`ResourceGather\` in TensorFlow

- Severity: High 7.3
- Published: Aug 12, 2021
- Affected: fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; from 2.5.0, fixed in 2.5.1; from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3.

### [CVE-2021-37641](https://cve.now/CVE-2021-37641): Heap OOB in \`RaggedGather\` in TensorFlow

- Severity: High 7.3
- Published: Aug 12, 2021
- Affected: from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; from 2.5.0, fixed in 2.5.1.

### [CVE-2021-37635](https://cve.now/CVE-2021-37635): Heap out of bounds access in sparse reduction operations in TensorFlow

- Severity: High 7.3
- Published: Aug 12, 2021
- Affected: fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; from 2.5.0, fixed in 2.5.1; from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3.

### [CVE-2021-37664](https://cve.now/CVE-2021-37664): Heap OOB in boosted trees in TensorFlow

- Severity: High 7.3
- Published: Aug 12, 2021
- Affected: fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; from 2.5.0, fixed in 2.5.1; from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3.

### [CVE-2021-37659](https://cve.now/CVE-2021-37659): Out of bounds read via null pointer dereference in TensorFlow

- Severity: High 7.3
- Published: Aug 12, 2021
- Affected: from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; from 2.5.0, fixed in 2.5.1.

### [CVE-2021-37655](https://cve.now/CVE-2021-37655): Heap OOB in \`ResourceScatterUpdate\` in TensorFlow

- Severity: High 7.3
- Published: Aug 12, 2021
- Affected: fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; from 2.5.0, fixed in 2.5.1; from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3.

### [CVE-2021-37637](https://cve.now/CVE-2021-37637): Null pointer dereference in \`CompressElement\` in TensorFlow

- Severity: High 7.7
- Published: Aug 12, 2021
- Affected: fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; from 2.5.0, fixed in 2.5.1; from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3.

### [CVE-2021-37649](https://cve.now/CVE-2021-37649): Null pointer dereference in \`UncompressElement\` in TensorFlow

- Severity: High 7.7
- Published: Aug 12, 2021
- Affected: fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; from 2.5.0, fixed in 2.5.1; from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3.

### [CVE-2021-37647](https://cve.now/CVE-2021-37647): Null pointer dereference in \`SparseTensorSliceDataset\` in TensorFlow

- Severity: High 7.7
- Published: Aug 12, 2021
- Affected: from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; from 2.5.0, fixed in 2.5.1.

### [CVE-2021-37643](https://cve.now/CVE-2021-37643): Null pointer dereference in \`MatrixDiagPartOp\` in TensorFlow

- Severity: High 7.7
- Published: Aug 12, 2021
- Affected: fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; from 2.5.0, fixed in 2.5.1; from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3.

### [CVE-2021-37639](https://cve.now/CVE-2021-37639): Null pointer dereference and heap OOB read in TensorFlow

- Severity: High 8.4
- Published: Aug 12, 2021
- Affected: from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; from 2.5.0, fixed in 2.5.1.

### [CVE-2021-37638](https://cve.now/CVE-2021-37638): Null pointer dereference in \`RaggedTensorToTensor\` in TensorFlow

- Severity: High 7.7
- Published: Aug 12, 2021
- Affected: fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; from 2.5.0, fixed in 2.5.1; from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3.

### [CVE-2021-37660](https://cve.now/CVE-2021-37660): Division by 0 in inplace operations in TensorFlow

- Severity: Medium 5.5
- Published: Aug 12, 2021
- Affected: from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; from 2.5.0, fixed in 2.5.1.

### [CVE-2021-37653](https://cve.now/CVE-2021-37653): Division by 0 in \`ResourceGather\` in TensorFlow

- Severity: Medium 5.5
- Published: Aug 12, 2021
- Affected: from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; from 2.5.0, fixed in 2.5.1.

### [CVE-2021-37642](https://cve.now/CVE-2021-37642): Division by 0 in \`ResourceScatterDiv\` in TensorFlow

- Severity: Medium 5.5
- Published: Aug 12, 2021
- Affected: fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; from 2.5.0, fixed in 2.5.1; from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3.

### [CVE-2021-37640](https://cve.now/CVE-2021-37640): Integer division by 0 in sparse reshaping in TensorFlow

- Severity: Medium 5.5
- Published: Aug 12, 2021
- Affected: from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; from 2.5.0, fixed in 2.5.1.

### [CVE-2021-37636](https://cve.now/CVE-2021-37636): Floating point exception in \`SparseDenseCwiseDiv\` in TensorFlow

- Severity: Medium 5.5
- Published: Aug 12, 2021
- Affected: from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; from 2.5.0, fixed in 2.5.1.

### [CVE-2021-29513](https://cve.now/CVE-2021-29513): Type confusion during tensor casts lead to dereferencing null pointers

- Severity: Low 2.5
- Published: May 14, 2021
- Affected: fixed in 2.2.0rc0; from 2.2.0, fixed in 2.3.0rc0; from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2.

### [CVE-2021-29514](https://cve.now/CVE-2021-29514): Heap out of bounds write in \`RaggedBinCount\`

- Severity: Low 2.5
- Published: May 14, 2021
- Affected: from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2; fixed in 2.2.0rc0; from 2.2.0, fixed in 2.3.0rc0; from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3.

### [CVE-2021-29515](https://cve.now/CVE-2021-29515): Reference binding to null pointer in \`MatrixDiag\*\` ops

- Severity: Low 2.5
- Published: May 14, 2021
- Affected: fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2; fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2.

### [CVE-2021-29516](https://cve.now/CVE-2021-29516): Null pointer dereference via invalid Ragged Tensors

- Severity: Low 2.5
- Published: May 14, 2021
- Affected: fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2; fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2.

### [CVE-2021-29517](https://cve.now/CVE-2021-29517): Division by zero in \`Conv3D\`

- Severity: Low 2.5
- Published: May 14, 2021
- Affected: fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2; fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2.

### [CVE-2021-29518](https://cve.now/CVE-2021-29518): Session operations in eager mode lead to null pointer dereferences

- Severity: Low 2.5
- Published: May 14, 2021
- Affected: fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2; fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2.

### [CVE-2021-29519](https://cve.now/CVE-2021-29519): CHECK-fail in SparseCross due to type confusion

- Severity: Low 2.5
- Published: May 14, 2021
- Affected: fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2; fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2.

### [CVE-2021-29520](https://cve.now/CVE-2021-29520): Heap buffer overflow in \`Conv3DBackprop\*\`

- Severity: Low 2.5
- Published: May 14, 2021
- Affected: fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2; fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2.

### [CVE-2021-29521](https://cve.now/CVE-2021-29521): Segfault in SparseCountSparseOutput

- Severity: Low 2.5
- Published: May 14, 2021
- Affected: from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2.

### [CVE-2021-29522](https://cve.now/CVE-2021-29522): Division by 0 in \`Conv3DBackprop\*\`

- Severity: Low 2.5
- Published: May 14, 2021
- Affected: fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2; fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2.

### [CVE-2021-29523](https://cve.now/CVE-2021-29523): CHECK-fail in AddManySparseToTensorsMap

- Severity: Low 2.5
- Published: May 14, 2021
- Affected: fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2; fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2.

### [CVE-2021-29524](https://cve.now/CVE-2021-29524): Division by 0 in \`Conv2DBackpropFilter\`

- Severity: Low 2.5
- Published: May 14, 2021
- Affected: fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2; fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2.

### [CVE-2021-29585](https://cve.now/CVE-2021-29585): Division by zero in padding computation in TFLite

- Severity: Low 2.5
- Published: May 14, 2021
- Affected: fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2; fixed in 2.2.0rc0; from 2.2.0, fixed in 2.3.0rc0; from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3.

### [CVE-2021-29586](https://cve.now/CVE-2021-29586): Division by zero in optimized pooling implementations in TFLite

- Severity: Low 2.5
- Published: May 14, 2021
- Affected: fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2; fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2.

### [CVE-2021-29615](https://cve.now/CVE-2021-29615): Stack overflow in \`ParseAttrValue\` with nested tensors

- Severity: Low 2.5
- Published: May 14, 2021
- Affected: fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2; fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2.

### [CVE-2021-29616](https://cve.now/CVE-2021-29616): Null dereference in Grappler's \`TrySimplify\`

- Severity: Low 2.5
- Published: May 14, 2021
- Affected: fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2; fixed in 2.2.0rc0; from 2.2.0, fixed in 2.3.0rc0; from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3.

### [CVE-2021-29617](https://cve.now/CVE-2021-29617): Crash in \`tf.strings.substr\` due to \`CHECK\`-fail

- Severity: Low 2.5
- Published: May 14, 2021
- Affected: fixed in 2.2.0rc0; from 2.2.0, fixed in 2.3.0rc0; from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2.

### [CVE-2021-29618](https://cve.now/CVE-2021-29618): Crash in \`tf.transpose\` with complex inputs

- Severity: Low 2.5
- Published: May 14, 2021
- Affected: fixed in 2.2.0rc0; from 2.2.0, fixed in 2.3.0rc0; from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2.

### [CVE-2021-29619](https://cve.now/CVE-2021-29619): Segfault in \`tf.raw\_ops.SparseCountSparseOutput\`

- Severity: Low 2.5
- Published: May 14, 2021
- Affected: fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2; fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2.

### [CVE-2021-29587](https://cve.now/CVE-2021-29587): Division by zero in TFLite's implementation of \`SpaceToDepth\`

- Severity: Low 2.5
- Published: May 14, 2021
- Affected: fixed in 2.2.0rc0; from 2.2.0, fixed in 2.3.0rc0; from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2.

### [CVE-2021-29588](https://cve.now/CVE-2021-29588): Division by zero in TFLite's implementation of \`TransposeConv\`

- Severity: Low 2.5
- Published: May 14, 2021
- Affected: fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2; fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2.

### [CVE-2021-29589](https://cve.now/CVE-2021-29589): Division by zero in TFLite's implementation of \`GatherNd\`

- Severity: Low 2.5
- Published: May 14, 2021
- Affected: fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2; fixed in 2.2.0rc0; from 2.2.0, fixed in 2.3.0rc0; from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3.

### [CVE-2021-29590](https://cve.now/CVE-2021-29590): Heap OOB read in TFLite's implementation of \`Minimum\` or \`Maximum\`

- Severity: Low 2.5
- Published: May 14, 2021
- Affected: fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2; fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2.

### [CVE-2021-29591](https://cve.now/CVE-2021-29591): Stack overflow due to looping TFLite subgraph

- Severity: High 7.3
- Published: May 14, 2021
- Affected: fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2; fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2.

### [CVE-2021-29592](https://cve.now/CVE-2021-29592): Null pointer dereference in TFLite's \`Reshape\` operator

- Severity: Medium 4.4
- Published: May 14, 2021
- Affected: fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2; fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2.

### [CVE-2021-29593](https://cve.now/CVE-2021-29593): Division by zero in TFLite's implementation of \`BatchToSpaceNd\`

- Severity: Low 2.5
- Published: May 14, 2021
- Affected: fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2; fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2.

### [CVE-2021-29594](https://cve.now/CVE-2021-29594): Division by zero in TFLite's convolution code

- Severity: Low 2.5
- Published: May 14, 2021
- Affected: fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2; fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2.

### [CVE-2021-29595](https://cve.now/CVE-2021-29595): Division by zero in TFLite's implementation of \`DepthToSpace\`

- Severity: Low 2.5
- Published: May 14, 2021
- Affected: fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2; fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3.

### [CVE-2021-29596](https://cve.now/CVE-2021-29596): Division by zero in TFLite's implementation of \`EmbeddingLookup\`

- Severity: Low 2.5
- Published: May 14, 2021
- Affected: fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2; fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2.

### [CVE-2021-29597](https://cve.now/CVE-2021-29597): Division by zero in TFLite's implementation of \`SpaceToBatchNd\`

- Severity: Low 2.5
- Published: May 14, 2021
- Affected: fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2; fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2.

### [CVE-2021-29598](https://cve.now/CVE-2021-29598): Division by zero in TFLite's implementation of \`SVDF\`

- Severity: Low 2.5
- Published: May 14, 2021
- Affected: fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2; fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2.

### [CVE-2021-29599](https://cve.now/CVE-2021-29599): Division by zero in TFLite's implementation of \`Split\`

- Severity: Low 2.5
- Published: May 14, 2021
- Affected: fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2; fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2.

### [CVE-2021-29600](https://cve.now/CVE-2021-29600): Division by zero in TFLite's implementation of \`OneHot\`

- Severity: Low 2.5
- Published: May 14, 2021
- Affected: fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2; fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2.

### [CVE-2021-29601](https://cve.now/CVE-2021-29601): Integer overflow in TFLite concatentation

- Severity: Medium 6.3
- Published: May 14, 2021
- Affected: fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2; fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2.

### [CVE-2021-29602](https://cve.now/CVE-2021-29602): Division by zero in TFLite's implementation of \`DepthwiseConv\`

- Severity: Low 2.5
- Published: May 14, 2021
- Affected: fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2; fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2.

### [CVE-2021-29603](https://cve.now/CVE-2021-29603): Heap OOB write in TFLite

- Severity: Low 2.5
- Published: May 14, 2021
- Affected: fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2; fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2.

### [CVE-2021-29604](https://cve.now/CVE-2021-29604): Division by zero in TFLite's implementation of hashtable lookup

- Severity: Low 2.5
- Published: May 14, 2021
- Affected: fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2; fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2.

### [CVE-2021-29605](https://cve.now/CVE-2021-29605): Integer overflow in TFLite memory allocation

- Severity: High 7.1
- Published: May 14, 2021
- Affected: fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2; fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2.

### [CVE-2021-29606](https://cve.now/CVE-2021-29606): Heap OOB read in TFLite

- Severity: High 7.1
- Published: May 14, 2021
- Affected: fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2; fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2.

### [CVE-2021-29607](https://cve.now/CVE-2021-29607): Incomplete validation in \`SparseSparseMinimum\`

- Severity: Medium 5.3
- Published: May 14, 2021
- Affected: fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2; fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2.

### [CVE-2021-29608](https://cve.now/CVE-2021-29608): Heap OOB and null pointer dereference in \`RaggedTensorToTensor\`

- Severity: Medium 5.3
- Published: May 14, 2021
- Affected: fixed in 2.2.0rc0; from 2.2.0, fixed in 2.3.0rc0; from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2.

### [CVE-2021-29609](https://cve.now/CVE-2021-29609): Incomplete validation in \`SparseAdd\`

- Severity: Medium 5.3
- Published: May 14, 2021
- Affected: fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2; fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2.

### [CVE-2021-29610](https://cve.now/CVE-2021-29610): Invalid validation in \`QuantizeAndDequantizeV2\`

- Severity: Low 3.6
- Published: May 14, 2021
- Affected: fixed in 2.2.0rc0; from 2.2.0, fixed in 2.3.0rc0; from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2.

### [CVE-2021-29611](https://cve.now/CVE-2021-29611): Incomplete validation in \`SparseReshape\`

- Severity: Low 3.6
- Published: May 14, 2021
- Affected: from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2; fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2.

### [CVE-2021-29612](https://cve.now/CVE-2021-29612): Heap buffer overflow in \`BandedTriangularSolve\`

- Severity: Low 3.6
- Published: May 14, 2021
- Affected: fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2; fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2.

### [CVE-2021-29613](https://cve.now/CVE-2021-29613): Incomplete validation in \`tf.raw\_ops.CTCLoss\`

- Severity: Medium 6.3
- Published: May 14, 2021
- Affected: fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2; fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2.

### [CVE-2021-29614](https://cve.now/CVE-2021-29614): Interpreter crash from \`tf.io.decode\_raw\`

- Severity: High 7.1
- Published: May 14, 2021
- Affected: fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2; fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2.

### [CVE-2021-29555](https://cve.now/CVE-2021-29555): Division by 0 in \`FusedBatchNorm\`

- Severity: Low 2.5
- Published: May 14, 2021
- Affected: fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2; fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2.

### [CVE-2021-29556](https://cve.now/CVE-2021-29556): Division by 0 in \`Reverse\`

- Severity: Low 2.5
- Published: May 14, 2021
- Affected: fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2; fixed in 2.2.0rc0; from 2.2.0, fixed in 2.3.0rc0; from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3.

### [CVE-2021-29557](https://cve.now/CVE-2021-29557): Division by 0 in \`SparseMatMul\`

- Severity: Low 2.5
- Published: May 14, 2021
- Affected: fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2; fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2.

### [CVE-2021-29558](https://cve.now/CVE-2021-29558): Heap buffer overflow in \`SparseSplit\`

- Severity: Low 2.5
- Published: May 14, 2021
- Affected: fixed in 2.1.4; from 2.2.0, fixed in 2.3.0rc0; from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2.

### [CVE-2021-29559](https://cve.now/CVE-2021-29559): Heap OOB access in unicode ops

- Severity: Low 2.5
- Published: May 14, 2021
- Affected: fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2; fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2.

### [CVE-2021-29560](https://cve.now/CVE-2021-29560): Heap buffer overflow in \`RaggedTensorToTensor\`

- Severity: Low 2.5
- Published: May 14, 2021
- Affected: fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2; fixed in 2.2.0rc0; from 2.2.0, fixed in 2.3.0rc0; from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3.

### [CVE-2021-29561](https://cve.now/CVE-2021-29561): CHECK-fail in \`LoadAndRemapMatrix\`

- Severity: Low 2.5
- Published: May 14, 2021
- Affected: fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2; fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2.

### [CVE-2021-29562](https://cve.now/CVE-2021-29562): CHECK-fail in \`tf.raw\_ops.IRFFT\`

- Severity: Low 2.5
- Published: May 14, 2021
- Affected: fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2; fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2.

### [CVE-2021-29563](https://cve.now/CVE-2021-29563): CHECK-fail in \`tf.raw\_ops.RFFT\`

- Severity: Low 2.5
- Published: May 14, 2021
- Affected: fixed in 2.2.0rc0; from 2.2.0, fixed in 2.3.0rc0; from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2.

### [CVE-2021-29564](https://cve.now/CVE-2021-29564): Null pointer dereference in \`EditDistance\`

- Severity: Low 2.5
- Published: May 14, 2021
- Affected: fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2; fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2.

### [CVE-2021-29565](https://cve.now/CVE-2021-29565): Null pointer dereference in \`SparseFillEmptyRows\`

- Severity: Low 2.5
- Published: May 14, 2021
- Affected: fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2; fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2.

### [CVE-2021-29566](https://cve.now/CVE-2021-29566): Heap OOB access in \`Dilation2DBackpropInput\`

- Severity: Low 2.5
- Published: May 14, 2021
- Affected: fixed in 2.2.0rc0; from 2.2.0, fixed in 2.3.0rc0; from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2.

### [CVE-2021-29567](https://cve.now/CVE-2021-29567): Lack of validation in \`SparseDenseCwiseMul\`

- Severity: Low 2.5
- Published: May 14, 2021
- Affected: fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2; fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2.

### [CVE-2021-29568](https://cve.now/CVE-2021-29568): Reference binding to null in \`ParameterizedTruncatedNormal\`

- Severity: Low 2.5
- Published: May 14, 2021
- Affected: fixed in 2.2.0rc0; from 2.2.0, fixed in 2.3.0rc0; from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2.

### [CVE-2021-29569](https://cve.now/CVE-2021-29569): Heap out of bounds read in \`RequantizationRange\`

- Severity: Low 2.5
- Published: May 14, 2021
- Affected: fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2; fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2.

### [CVE-2021-29570](https://cve.now/CVE-2021-29570): Heap out of bounds read in \`MaxPoolGradWithArgmax\`

- Severity: Low 2.5
- Published: May 14, 2021
- Affected: fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2; fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2.

### [CVE-2021-29571](https://cve.now/CVE-2021-29571): Memory corruption in \`DrawBoundingBoxesV2\`

- Severity: Medium 4.5
- Published: May 14, 2021
- Affected: fixed in 2.2.0rc0; from 2.2.0, fixed in 2.3.0rc0; from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2.

### [CVE-2021-29572](https://cve.now/CVE-2021-29572): Reference binding to nullptr in \`SdcaOptimizer\`

- Severity: Low 2.5
- Published: May 14, 2021
- Affected: fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2; fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2.

### [CVE-2021-29573](https://cve.now/CVE-2021-29573): Division by 0 in \`MaxPoolGradWithArgmax\`

- Severity: Low 2.5
- Published: May 14, 2021
- Affected: fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2; fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2.

### [CVE-2021-29574](https://cve.now/CVE-2021-29574): Undefined behavior in \`MaxPool3DGradGrad\`

- Severity: Low 2.5
- Published: May 14, 2021
- Affected: fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2; fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2.

### [CVE-2021-29575](https://cve.now/CVE-2021-29575): Overflow/denial of service in \`tf.raw\_ops.ReverseSequence\`

- Severity: Low 2.5
- Published: May 14, 2021
- Affected: fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2; fixed in 2.2.0rc0; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2.

### [CVE-2021-29576](https://cve.now/CVE-2021-29576): Heap buffer overflow in \`MaxPool3DGradGrad\`

- Severity: Low 2.5
- Published: May 14, 2021
- Affected: fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2; fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2.

### [CVE-2021-29577](https://cve.now/CVE-2021-29577): Heap buffer overflow in \`AvgPool3DGrad\`

- Severity: Low 2.5
- Published: May 14, 2021
- Affected: fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2; fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2.

### [CVE-2021-29578](https://cve.now/CVE-2021-29578): Heap buffer overflow in \`FractionalAvgPoolGrad\`

- Severity: Low 2.5
- Published: May 14, 2021
- Affected: fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2; fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2.

### [CVE-2021-29579](https://cve.now/CVE-2021-29579): Heap buffer overflow in \`MaxPoolGrad\`

- Severity: Low 2.5
- Published: May 14, 2021
- Affected: fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2; fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2.

### [CVE-2021-29580](https://cve.now/CVE-2021-29580): Undefined behavior and \`CHECK\`-fail in \`FractionalMaxPoolGrad\`

- Severity: Low 2.5
- Published: May 14, 2021
- Affected: fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2; fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2.

### [CVE-2021-29581](https://cve.now/CVE-2021-29581): Segfault in \`CTCBeamSearchDecoder\`

- Severity: Low 2.5
- Published: May 14, 2021
- Affected: fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2; fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2.

### [CVE-2021-29582](https://cve.now/CVE-2021-29582): Heap OOB read in \`tf.raw\_ops.Dequantize\`

- Severity: Low 2.5
- Published: May 14, 2021
- Affected: fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2; fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2.

### [CVE-2021-29583](https://cve.now/CVE-2021-29583): Heap buffer overflow and undefined behavior in \`FusedBatchNorm\`

- Severity: Low 2.5
- Published: May 14, 2021
- Affected: fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2; fixed in 2.2.0rc0; from 2.2.0, fixed in 2.3.0rc0; from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3.

### [CVE-2021-29584](https://cve.now/CVE-2021-29584): CHECK-fail due to integer overflow

- Severity: Low 2.5
- Published: May 14, 2021
- Affected: fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2; fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2.

### [CVE-2021-29525](https://cve.now/CVE-2021-29525): Division by 0 in \`Conv2DBackpropInput\`

- Severity: Low 2.5
- Published: May 14, 2021
- Affected: fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2; fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2.

### [CVE-2021-29526](https://cve.now/CVE-2021-29526): Division by 0 in \`Conv2D\`

- Severity: Low 2.5
- Published: May 14, 2021
- Affected: fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2; fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2.

### [CVE-2021-29527](https://cve.now/CVE-2021-29527): Division by 0 in \`QuantizedConv2D\`

- Severity: Low 2.5
- Published: May 14, 2021
- Affected: fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2; fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2.

### [CVE-2021-29528](https://cve.now/CVE-2021-29528): Division by 0 in \`QuantizedMul\`

- Severity: Low 2.5
- Published: May 14, 2021
- Affected: fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2; fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2.

### [CVE-2021-29529](https://cve.now/CVE-2021-29529): Heap buffer overflow caused by rounding

- Severity: Low 2.5
- Published: May 14, 2021
- Affected: fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2; fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2.

### [CVE-2021-29530](https://cve.now/CVE-2021-29530): Invalid validation in \`SparseMatrixSparseCholesky\`

- Severity: Low 2.5
- Published: May 14, 2021
- Affected: fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2; fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2.

### [CVE-2021-29531](https://cve.now/CVE-2021-29531): CHECK-fail in tf.raw\_ops.EncodePng

- Severity: Low 2.5
- Published: May 14, 2021
- Affected: fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2; fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2.

### [CVE-2021-29532](https://cve.now/CVE-2021-29532): Heap out of bounds read in \`RaggedCross\`

- Severity: Low 2.5
- Published: May 14, 2021
- Affected: fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2; fixed in 2.2.0rc0; from 2.2.0, fixed in 2.3.0rc0; from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3.

### [CVE-2021-29533](https://cve.now/CVE-2021-29533): CHECK-fail in DrawBoundingBoxes

- Severity: Low 2.5
- Published: May 14, 2021
- Affected: fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2; fixed in 2.2.0rc0; from 2.2.0, fixed in 2.3.0rc0; from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3.

### [CVE-2021-29534](https://cve.now/CVE-2021-29534): CHECK-fail in SparseConcat

- Severity: Low 2.5
- Published: May 14, 2021
- Affected: fixed in 2.2.0rc0; from 2.2.0, fixed in 2.3.0rc0; from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2.

### [CVE-2021-29535](https://cve.now/CVE-2021-29535): Heap buffer overflow in \`QuantizedMul\`

- Severity: Low 2.5
- Published: May 14, 2021
- Affected: fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2; fixed in 2.2.0rc0; from 2.2.0, fixed in 2.3.0rc0; from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3.

### [CVE-2021-29536](https://cve.now/CVE-2021-29536): Heap buffer overflow in \`QuantizedReshape\`

- Severity: Low 2.5
- Published: May 14, 2021
- Affected: fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2; fixed in 2.2.0rc0; from 2.2.0, fixed in 2.3.0rc0; from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3.

### [CVE-2021-29537](https://cve.now/CVE-2021-29537): Heap buffer overflow in \`QuantizedResizeBilinear\`

- Severity: Low 2.5
- Published: May 14, 2021
- Affected: fixed in 2.2.0rc0; from 2.2.0, fixed in 2.3.0rc0; from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2.

### [CVE-2021-29538](https://cve.now/CVE-2021-29538): Division by zero in \`Conv2DBackpropFilter\`

- Severity: Low 2.5
- Published: May 14, 2021
- Affected: fixed in 2.2.0rc0; from 2.2.0, fixed in 2.3.0rc0; from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2.

### [CVE-2021-29539](https://cve.now/CVE-2021-29539): Segfault in tf.raw\_ops.ImmutableConst

- Severity: Low 2.5
- Published: May 14, 2021
- Affected: fixed in 2.2.0rc0; from 2.2.0, fixed in 2.3.0rc0; from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2.

### [CVE-2021-29540](https://cve.now/CVE-2021-29540): Heap buffer overflow in \`Conv2DBackpropFilter\`

- Severity: Low 2.5
- Published: May 14, 2021
- Affected: fixed in 2.2.0rc0; from 2.2.0, fixed in 2.3.0rc0; from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2.

### [CVE-2021-29541](https://cve.now/CVE-2021-29541): Null pointer dereference in \`StringNGrams\`

- Severity: Low 2.5
- Published: May 14, 2021
- Affected: fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2; fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2.

### [CVE-2021-29542](https://cve.now/CVE-2021-29542): Heap buffer overflow in \`StringNGrams\`

- Severity: Low 2.5
- Published: May 14, 2021
- Affected: fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2; fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2.

### [CVE-2021-29543](https://cve.now/CVE-2021-29543): CHECK-fail in \`CTCGreedyDecoder\`

- Severity: Low 2.5
- Published: May 14, 2021
- Affected: fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2; fixed in 2.2.0rc0; from 2.2.0, fixed in 2.3.0rc0; from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3.

### [CVE-2021-29544](https://cve.now/CVE-2021-29544): CHECK-fail in \`QuantizeAndDequantizeV4Grad\`

- Severity: Low 2.5
- Published: May 14, 2021
- Affected: fixed in 2.2.0rc0; from 2.2.0, fixed in 2.3.0rc0; from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; from 2.4.0, fixed in 2.4.2.

### [CVE-2021-29545](https://cve.now/CVE-2021-29545): Heap buffer overflow in \`SparseTensorToCSRSparseMatrix\`

- Severity: Low 2.5
- Published: May 14, 2021
- Affected: fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2; fixed in 2.2.0rc0; from 2.2.0, fixed in 2.3.0rc0; from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3.

### [CVE-2021-29546](https://cve.now/CVE-2021-29546): Division by 0 in \`QuantizedBiasAdd\`

- Severity: Low 2.5
- Published: May 14, 2021
- Affected: fixed in 2.2.0rc0; from 2.2.0, fixed in 2.3.0rc0; from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2.

### [CVE-2021-29547](https://cve.now/CVE-2021-29547): Heap out of bounds in \`QuantizedBatchNormWithGlobalNormalization\`

- Severity: Low 2.5
- Published: May 14, 2021
- Affected: fixed in 2.2.0rc0; from 2.2.0, fixed in 2.3.0rc0; from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2.

### [CVE-2021-29548](https://cve.now/CVE-2021-29548): Division by 0 in \`QuantizedBatchNormWithGlobalNormalization\`

- Severity: Low 2.5
- Published: May 14, 2021
- Affected: fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2; fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2.

### [CVE-2021-29549](https://cve.now/CVE-2021-29549): Division by 0 in \`QuantizedAdd\`

- Severity: Low 2.5
- Published: May 14, 2021
- Affected: fixed in 2.2.0rc0; from 2.2.0, fixed in 2.3.0rc0; from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2.

### [CVE-2021-29550](https://cve.now/CVE-2021-29550): Division by 0 in \`FractionalAvgPool\`

- Severity: Low 2.5
- Published: May 14, 2021
- Affected: fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2; fixed in 2.2.0rc0; from 2.2.0, fixed in 2.3.0rc0; from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3.

### [CVE-2021-29551](https://cve.now/CVE-2021-29551): OOB read in \`MatrixTriangularSolve\`

- Severity: Low 2.5
- Published: May 14, 2021
- Affected: fixed in 2.2.0rc0; from 2.2.0, fixed in 2.3.0rc0; from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2.

### [CVE-2021-29552](https://cve.now/CVE-2021-29552): CHECK-failure in \`UnsortedSegmentJoin\`

- Severity: Low 2.5
- Published: May 14, 2021
- Affected: fixed in 2.2.0rc0; from 2.2.0, fixed in 2.3.0rc0; from 2.3.0, fixed in 2.3.4; from 2.4.0, fixed in 2.4.3; fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2.

### [CVE-2021-29553](https://cve.now/CVE-2021-29553): Heap OOB in \`QuantizeAndDequantizeV3\`

- Severity: Low 2.5
- Published: May 14, 2021
- Affected: fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2; fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2.

### [CVE-2021-29554](https://cve.now/CVE-2021-29554): Division by 0 in \`DenseCountSparseOutput\`

- Severity: Low 2.5
- Published: May 14, 2021
- Affected: fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2.

### [CVE-2021-29512](https://cve.now/CVE-2021-29512): Heap buffer overflow in \`RaggedBinCount\`

- Severity: Low 2.5
- Published: May 14, 2021
- Affected: from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.2.

### [CVE-2020-26266](https://cve.now/CVE-2020-26266): Uninitialized memory access in Eigen types in TensorFlow

- Severity: Medium 4.4
- Published: Dec 10, 2020
- Affected: fixed in 1.15.5; from 2.0.0, fixed in 2.0.4; from 2.1.0, fixed in 2.1.3; from 2.2.0, fixed in 2.2.2; from 2.3.0, fixed in 2.3.2; fixed in 1.15.5; from 2.0.0, fixed in 2.0.4; from 2.1.0, fixed in 2.1.3; from 2.2.0, fixed in 2.2.2; from 2.3.0, fixed in 2.3.2.

### [CVE-2020-26267](https://cve.now/CVE-2020-26267): Lack of validation in data format attributes in TensorFlow

- Severity: Medium 4.4
- Published: Dec 10, 2020
- Affected: fixed in 1.15.5; from 2.0.0, fixed in 2.0.4; from 2.1.0, fixed in 2.1.3; from 2.2.0, fixed in 2.2.2; from 2.3.0, fixed in 2.3.2; fixed in 1.15.5; from 2.0.0, fixed in 2.0.4; from 2.1.0, fixed in 2.1.3; from 2.2.0, fixed in 2.2.2; from 2.3.0, fixed in 2.3.2.

### [CVE-2020-26268](https://cve.now/CVE-2020-26268): Write to immutable memory region in TensorFlow

- Severity: Medium 4.4
- Published: Dec 10, 2020
- Affected: fixed in 1.15.5; from 2.0.0, fixed in 2.0.4; from 2.1.0, fixed in 2.1.3; from 2.2.0, fixed in 2.2.2; from 2.3.0, fixed in 2.3.2; fixed in 1.15.5; from 2.0.0, fixed in 2.0.4; from 2.1.0, fixed in 2.1.3; from 2.2.0, fixed in 2.2.2; from 2.3.0, fixed in 2.3.2.

### [CVE-2020-26269](https://cve.now/CVE-2020-26269): Heap out of bounds read in filesystem glob matching in TensorFlow

- Severity: Unrated
- Published: Dec 10, 2020
- Affected: from 2.4.0rc0, fixed in 2.4.0; from 2.4.0rc0, fixed in 2.4.0.

### [CVE-2020-26270](https://cve.now/CVE-2020-26270): CHECK-fail in LSTM with zero-length input in TensorFlow

- Severity: Medium 4.4
- Published: Dec 10, 2020
- Affected: fixed in 1.15.5; from 2.0.0, fixed in 2.0.4; from 2.1.0, fixed in 2.1.3; from 2.2.0, fixed in 2.2.2; from 2.3.0, fixed in 2.3.2; fixed in 1.15.5; from 2.0.0, fixed in 2.0.4; from 2.1.0, fixed in 2.1.3; from 2.2.0, fixed in 2.2.2; from 2.3.0, fixed in 2.3.2.

### [CVE-2020-26271](https://cve.now/CVE-2020-26271): Heap out of bounds access in MakeEdge in TensorFlow

- Severity: Medium 4.4
- Published: Dec 10, 2020
- Affected: fixed in 1.15.5; from 2.0.0, fixed in 2.0.4; from 2.1.0, fixed in 2.1.3; from 2.2.0, fixed in 2.2.2; from 2.3.0, fixed in 2.3.2; fixed in 1.15.5; from 2.0.0, fixed in 2.0.4; from 2.1.0, fixed in 2.1.3; from 2.2.0, fixed in 2.2.2; from 2.3.0, fixed in 2.3.2.

### [CVE-2020-15266](https://cve.now/CVE-2020-15266): Undefined behavior in Tensorflow

- Severity: Low 3.7
- Published: Oct 21, 2020
- Affected: fixed in 2.4.0; fixed in 2.4.0.

### [CVE-2020-15265](https://cve.now/CVE-2020-15265): Segfault in Tensorflow

- Severity: Medium 5.9
- Published: Oct 21, 2020
- Affected: fixed in 2.4.0; fixed in 2.4.0.

### [CVE-2020-15212](https://cve.now/CVE-2020-15212): Out of bounds access in tensorflow-lite

- Severity: High 8.1
- Published: Sep 25, 2020
- Affected: from 2.3.0, fixed in 2.3.1; from 2.2.0, fixed in 2.2.1; from 2.2.0, fixed in 2.2.1; from 2.3.0, fixed in 2.3.1.

### [CVE-2020-15213](https://cve.now/CVE-2020-15213): Denial of service in tensorflow-lite

- Severity: Medium 4.0
- Published: Sep 25, 2020
- Affected: from 2.2.0, fixed in 2.2.1; from 2.3.0, fixed in 2.3.1; from 2.2.0, fixed in 2.2.1; from 2.3.0, fixed in 2.3.1.

### [CVE-2020-15214](https://cve.now/CVE-2020-15214): Out of bounds write in tensorflow-lite

- Severity: High 8.1
- Published: Sep 25, 2020
- Affected: from 2.2.0, fixed in 2.2.1; from 2.3.0, fixed in 2.3.1; from 2.2.0, fixed in 2.2.1; from 2.3.0, fixed in 2.3.1.

### [CVE-2020-15201](https://cve.now/CVE-2020-15201): Heap buffer overflow in Tensorflow

- Severity: Medium 4.8
- Published: Sep 25, 2020
- Affected: from 2.3.0, fixed in 2.3.1; fixed in 2.3.1.

### [CVE-2020-15202](https://cve.now/CVE-2020-15202): Integer truncation in Shard API usage

- Severity: Critical 9.0
- Published: Sep 25, 2020
- Affected: fixed in 1.15.4; from 2.0.0, fixed in 2.0.3; from 2.1.0, fixed in 2.1.2; from 2.2.0, fixed in 2.2.1; from 2.3.0, fixed in 2.3.1; fixed in 1.15.4; from 2.0.0, fixed in 2.0.3; from 2.1.0, fixed in 2.1.2; from 2.2.0, fixed in 2.2.1; from 2.3.0, fixed in 2.3.1.

### [CVE-2020-15203](https://cve.now/CVE-2020-15203): Denial of Service in Tensorflow

- Severity: High 7.5
- Published: Sep 25, 2020
- Affected: fixed in 1.15.4; from 2.0.0, fixed in 2.0.3; from 2.1.0, fixed in 2.1.2; from 2.2.0, fixed in 2.2.1; from 2.3.0, fixed in 2.3.1; fixed in 1.15.4; from 2.0.0, fixed in 2.0.3; from 2.1.0, fixed in 2.1.2; from 2.2.0, fixed in 2.2.1; from 2.3.0, fixed in 2.3.1.

### [CVE-2020-15204](https://cve.now/CVE-2020-15204): Segfault in Tensorflow

- Severity: Medium 5.3
- Published: Sep 25, 2020
- Affected: fixed in 1.15.4; from 2.0.0, fixed in 2.0.3; from 2.1.0, fixed in 2.1.2; from 2.2.0, fixed in 2.2.1; from 2.3.0, fixed in 2.3.1; fixed in 1.15.4; from 2.0.0, fixed in 2.0.3; from 2.1.0, fixed in 2.1.2; from 2.2.0, fixed in 2.2.1; from 2.3.0, fixed in 2.3.1.

### [CVE-2020-15205](https://cve.now/CVE-2020-15205): Data leak in Tensorflow

- Severity: Critical 9.0
- Published: Sep 25, 2020
- Affected: fixed in 1.15.4; from 2.0.0, fixed in 2.0.3; from 2.1.0, fixed in 2.1.2; from 2.2.0, fixed in 2.2.1; from 2.3.0, fixed in 2.3.1; fixed in 1.15.4; from 2.0.0, fixed in 2.0.3; from 2.1.0, fixed in 2.1.2; from 2.2.0, fixed in 2.2.1; from 2.3.0, fixed in 2.3.1.

### [CVE-2020-15206](https://cve.now/CVE-2020-15206): Denial of Service in Tensorflow

- Severity: Critical 9.0
- Published: Sep 25, 2020
- Affected: fixed in 1.15.4; from 2.0.0, fixed in 2.0.3; from 2.1.0, fixed in 2.1.2; from 2.2.0, fixed in 2.2.1; from 2.3.0, fixed in 2.3.1; fixed in 1.15.4; from 2.0.0, fixed in 2.0.3; from 2.1.0, fixed in 2.1.2; from 2.2.0, fixed in 2.2.1; from 2.3.0, fixed in 2.3.1.

### [CVE-2020-15207](https://cve.now/CVE-2020-15207): Segfault and data corruption in tensorflow-lite

- Severity: High 8.7
- Published: Sep 25, 2020
- Affected: fixed in 1.15.4; from 2.0.0, fixed in 2.0.3; from 2.1.0, fixed in 2.1.2; from 2.2.0, fixed in 2.2.1; from 2.3.0, fixed in 2.3.1; fixed in 1.15.4; from 2.0.0, fixed in 2.0.3; from 2.1.0, fixed in 2.1.2; from 2.2.0, fixed in 2.2.1; from 2.3.0, fixed in 2.3.1.

### [CVE-2020-15208](https://cve.now/CVE-2020-15208): Data corruption in tensorflow-lite

- Severity: High 7.4
- Published: Sep 25, 2020
- Affected: fixed in 1.15.4; from 2.0.0, fixed in 2.0.3; from 2.1.0, fixed in 2.1.2; from 2.2.0, fixed in 2.2.1; from 2.3.0, fixed in 2.3.1; fixed in 1.15.4; from 2.0.0, fixed in 2.0.3; from 2.1.0, fixed in 2.1.2; from 2.2.0, fixed in 2.2.1; from 2.3.0, fixed in 2.3.1.

### [CVE-2020-15209](https://cve.now/CVE-2020-15209): Null pointer dereference in tensorflow-lite

- Severity: Medium 5.9
- Published: Sep 25, 2020
- Affected: fixed in 1.15.4; from 2.0.0, fixed in 2.0.3; from 2.1.0, fixed in 2.1.2; from 2.2.0, fixed in 2.2.1; from 2.3.0, fixed in 2.3.1; fixed in 1.15.4; from 2.0.0, fixed in 2.0.3; from 2.1.0, fixed in 2.1.2; from 2.2.0, fixed in 2.2.1; from 2.3.0, fixed in 2.3.1.

### [CVE-2020-15210](https://cve.now/CVE-2020-15210): Segmentation fault in tensorflow-lite

- Severity: Medium 6.5
- Published: Sep 25, 2020
- Affected: fixed in 1.15.4; from 2.0.0, fixed in 2.0.3; from 2.1.0, fixed in 2.1.2; from 2.2.0, fixed in 2.2.1; from 2.3.0, fixed in 2.3.1; fixed in 1.15.4; from 2.0.0, fixed in 2.0.3; from 2.1.0, fixed in 2.1.2; from 2.2.0, fixed in 2.2.1; from 2.3.0, fixed in 2.3.1.

### [CVE-2020-15211](https://cve.now/CVE-2020-15211): Out of bounds access in tensorflow-lite

- Severity: Medium 4.8
- Published: Sep 25, 2020
- Affected: fixed in 1.15.4; from 2.0.0, fixed in 2.0.3; from 2.1.0, fixed in 2.1.2; from 2.2.0, fixed in 2.2.1; from 2.3.0, fixed in 2.3.1; fixed in 1.15.4; from 2.0.0, fixed in 2.0.3; from 2.1.0, fixed in 2.1.2; from 2.2.0, fixed in 2.2.1; from 2.3.0, fixed in 2.3.1.

### [CVE-2020-15191](https://cve.now/CVE-2020-15191): Undefined behavior in Tensorflow

- Severity: Medium 5.3
- Published: Sep 25, 2020
- Affected: from 2.2.0, fixed in 2.2.1; from 2.3.0, fixed in 2.3.1; fixed in 2.2.1; from 2.3.0rc0, fixed in 2.3.1.

### [CVE-2020-15192](https://cve.now/CVE-2020-15192): Memory leak in Tensorflow

- Severity: Medium 4.3
- Published: Sep 25, 2020
- Affected: from 2.2.0, fixed in 2.2.1; from 2.3.0, fixed in 2.3.1; fixed in 2.2.1; from 2.3.0rc0, fixed in 2.3.1.

### [CVE-2020-15193](https://cve.now/CVE-2020-15193): Memory corruption in Tensorflow

- Severity: High 7.1
- Published: Sep 25, 2020
- Affected: fixed in 2.2.1; from 2.3.0rc0, fixed in 2.3.1; from 2.2.0, fixed in 2.2.1; from 2.3.0, fixed in 2.3.1.

### [CVE-2020-15194](https://cve.now/CVE-2020-15194): Denial of Service in Tensorflow

- Severity: Medium 5.3
- Published: Sep 25, 2020
- Affected: fixed in 1.15.4; from 2.0.0, fixed in 2.0.3; from 2.1.0, fixed in 2.1.2; from 2.2.0, fixed in 2.2.1; from 2.3.0, fixed in 2.3.1; fixed in 1.15.4; from 2.0.0, fixed in 2.0.3; from 2.1.0, fixed in 2.1.2; from 2.2.0, fixed in 2.2.1; from 2.3.0, fixed in 2.3.1.

### [CVE-2020-15195](https://cve.now/CVE-2020-15195): Heap buffer overflow in Tensorflow

- Severity: High 8.5
- Published: Sep 25, 2020
- Affected: fixed in 1.15.4; from 2.0.0, fixed in 2.0.3; from 2.1.0, fixed in 2.1.2; from 2.2.0, fixed in 2.2.1; from 2.3.0, fixed in 2.3.1; fixed in 1.15.4; from 2.0.0, fixed in 2.0.3; from 2.1.0, fixed in 2.1.2; from 2.2.0, fixed in 2.2.1; from 2.3.0, fixed in 2.3.1.

### [CVE-2020-15196](https://cve.now/CVE-2020-15196): Heap buffer overflow in Tensorflow

- Severity: High 8.5
- Published: Sep 25, 2020
- Affected: from 2.3.0, fixed in 2.3.1; fixed in 2.3.1.

### [CVE-2020-15197](https://cve.now/CVE-2020-15197): Denial of Service in Tensorflow

- Severity: Medium 6.3
- Published: Sep 25, 2020
- Affected: fixed in 2.3.1; from 2.3.0, fixed in 2.3.1.

### [CVE-2020-15198](https://cve.now/CVE-2020-15198): Heap buffer overflow in Tensorflow

- Severity: Medium 5.4
- Published: Sep 25, 2020
- Affected: from 2.3.0, fixed in 2.3.1; fixed in 2.3.1.

### [CVE-2020-15199](https://cve.now/CVE-2020-15199): Denial of Service in Tensorflow

- Severity: Medium 5.9
- Published: Sep 25, 2020
- Affected: from 2.3.0, fixed in 2.3.1; fixed in 2.3.1.

### [CVE-2020-15200](https://cve.now/CVE-2020-15200): Segfault in Tensorflow

- Severity: Medium 5.9
- Published: Sep 25, 2020
- Affected: fixed in 2.3.1; from 2.3.0, fixed in 2.3.1.

### [CVE-2020-15190](https://cve.now/CVE-2020-15190): Segfault in Tensorflow

- Severity: Medium 5.3
- Published: Sep 25, 2020
- Affected: fixed in 1.15.4; from 2.0.0, fixed in 2.0.3; from 2.1.0, fixed in 2.1.2; from 2.2.0, fixed in 2.2.1; from 2.3.0, fixed in 2.3.1; fixed in 1.15.4; from 2.0.0, fixed in 2.0.3; from 2.1.0, fixed in 2.1.2; from 2.2.0, fixed in 2.2.1; from 2.3.0, fixed in 2.3.1.

### [CVE-2018-21233](https://cve.now/CVE-2018-21233): TensorFlow before 1.7.0 has an integer overflow that causes an out-of-bounds read, possibly causing disclosure of the contents of process…

- Severity: Unrated
- Published: May 4, 2020
- Affected: fixed in 1.7.0; fixed in 1.7.0.

### [CVE-2020-5215](https://cve.now/CVE-2020-5215): Segmentation faultin TensorFlow when converting a Python string to tf.float16

- Severity: Medium 5.0
- Published: Jan 28, 2020
- Affected: fixed in 1.15.2; from 2.0.0, fixed in 2.0.1; fixed in 1.15.2; from 2.0.0, fixed in 2.0.1.

### [CVE-2019-16778](https://cve.now/CVE-2019-16778): Heap buffer overflow in \`UnsortedSegmentSum\` in TensorFlow

- Severity: Low 2.6
- Published: Dec 16, 2019
- Affected: fixed in 1.15.0; from 1.0.0, fixed in 1.15.0.

### [CVE-2018-7575](https://cve.now/CVE-2018-7575): Google TensorFlow 1.7.x and earlier is affected by a Buffer Overflow vulnerability.

- Severity: Unrated
- Published: Apr 24, 2019
- Affected: fixed in 1.7.1; from 1.0.0, fixed in 1.7.1.

### [CVE-2019-9635](https://cve.now/CVE-2019-9635): NULL pointer dereference in Google TensorFlow before 1.12.2 could cause a denial of service via an invalid GIF file.

- Severity: Unrated
- Published: Apr 24, 2019
- Affected: from 1.0.0, fixed in 1.12.1; fixed in 1.12.2.

### [CVE-2018-10055](https://cve.now/CVE-2018-10055): Invalid memory access and/or a heap buffer overflow in the TensorFlow XLA compiler in Google TensorFlow before 1.7.1 could cause a crash…

- Severity: Unrated
- Published: Apr 24, 2019
- Affected: from 1.1.0, fixed in 1.7.1; fixed in 1.7.1.

### [CVE-2018-7577](https://cve.now/CVE-2018-7577): Memcpy parameter overlap in Google Snappy library 1.1.4, as used in Google TensorFlow before 1.7.1, could result in a crash or read from…

- Severity: Unrated
- Published: Apr 24, 2019
- Affected: from 1.1.0, fixed in 1.7.1; fixed in 1.7.1.

### [CVE-2018-8825](https://cve.now/CVE-2018-8825): Google TensorFlow 1.7 and below is affected by: Buffer Overflow.

- Severity: Unrated
- Published: Apr 23, 2019
- Affected: fixed in 1.7.1; from 1.5.0, fixed in 1.7.1.

### [CVE-2018-7576](https://cve.now/CVE-2018-7576): Google TensorFlow 1.6.x and earlier is affected by: Null Pointer Dereference.

- Severity: Unrated
- Published: Apr 23, 2019
- Affected: fixed in 1.7.0rc0; from 1.0.0, fixed in 1.6.0.

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/packages/pypi/tensorflow
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.