# cve.now: Tensorflow

The newest entries naming Tensorflow as an affected vendor (up to 200), of 403 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-2492](https://cve.now/CVE-2026-2492.md): TensorFlow HDF5 Library Uncontrolled Search Path Element Local Privilege Escalation Vulnerability (CVSS 7.0)
- [CVE-2023-33976](https://cve.now/CVE-2023-33976.md): TensorFlow segfault in array\_ops.upper\_bound (CVSS 7.5)
- [CVE-2024-3660](https://cve.now/CVE-2024-3660.md): Arbitrary code injection vulnerability in Keras framework \< 2.13 (CVSS 9.8)
- [CVE-2023-25661](https://cve.now/CVE-2023-25661.md): Denial of Service in TensorFlow (CVSS 6.5)
- [CVE-2023-25660](https://cve.now/CVE-2023-25660.md): TensorFlow vulnerable to seg fault in \`tf.raw\_ops.Print\` (CVSS 7.5)
- [CVE-2023-25659](https://cve.now/CVE-2023-25659.md): TensorFlow vulnerable to Out-of-Bounds Read in DynamicStitch (CVSS 7.5)
- [CVE-2023-25658](https://cve.now/CVE-2023-25658.md): TensorFlow vulnerable to Out-of-Bounds Read in GRUBlockCellGrad (CVSS 7.5)
- [CVE-2023-25662](https://cve.now/CVE-2023-25662.md): TensorFlow vulnerable to integer overflow in EditDistance (CVSS 7.5)
- [CVE-2023-25663](https://cve.now/CVE-2023-25663.md): TensorFlow has Null Pointer Error in TensorArrayConcatV2 (CVSS 7.5)
- [CVE-2023-25664](https://cve.now/CVE-2023-25664.md): TensorFlow vulnerable to Heap Buffer Overflow in AvgPoolGrad (CVSS 7.5)
- [CVE-2023-25667](https://cve.now/CVE-2023-25667.md): TensorFlow vulnerable to segfault when opening multiframe gif (CVSS 6.5)
- [CVE-2023-25666](https://cve.now/CVE-2023-25666.md): TensorFlow has Floating Point Exception in AudioSpectrogram (CVSS 7.5)
- [CVE-2023-25665](https://cve.now/CVE-2023-25665.md): TensorFlow has Null Pointer Error in SparseSparseMaximum (CVSS 7.5)
- [CVE-2023-25668](https://cve.now/CVE-2023-25668.md): TensorFlow vulnerable to heap out-of-buffer read in the QuantizeAndDequantize operation (CVSS 9.8)
- [CVE-2023-25669](https://cve.now/CVE-2023-25669.md): TensorFlow has Floating Point Exception in AvgPoolGrad with XLA (CVSS 7.5)
- [CVE-2023-25670](https://cve.now/CVE-2023-25670.md): TensorFlow has Null Pointer Error in QuantizedMatMulWithBiasAndDequantize (CVSS 7.5)
- [CVE-2023-25671](https://cve.now/CVE-2023-25671.md): TensorFlow has segmentation fault in tfg-translate (CVSS 7.5)
- [CVE-2023-25672](https://cve.now/CVE-2023-25672.md): TensorFlow has Null Pointer Error in LookupTableImportV2 (CVSS 7.5)
- [CVE-2023-25673](https://cve.now/CVE-2023-25673.md): TensorFlow has Floating Point Exception in TensorListSplit with XLA (CVSS 7.5)
- [CVE-2023-25674](https://cve.now/CVE-2023-25674.md): TensorFlow has Null Pointer Error in RandomShuffle with XLA enable (CVSS 7.5)
- [CVE-2023-25675](https://cve.now/CVE-2023-25675.md): TensorFlow has Segfault in Bincount with XLA (CVSS 7.5)
- [CVE-2023-25676](https://cve.now/CVE-2023-25676.md): TensorFlow has null dereference on ParallelConcat with XLA (CVSS 7.5)
- [CVE-2023-25801](https://cve.now/CVE-2023-25801.md): TensorFlow has double free in Fractional(Max/Avg)Pool (CVSS 8.0)
- [CVE-2023-27579](https://cve.now/CVE-2023-27579.md): TensorFlow has Floating Point Exception in TFLite in conv kernel (CVSS 7.5)
- [CVE-2022-41910](https://cve.now/CVE-2022-41910.md): Heap out of bounds read in \`QuantizeAndDequantizeV2\` in Tensorflow (CVSS 4.8)
- [CVE-2022-41902](https://cve.now/CVE-2022-41902.md): Out of bounds write in grappler in Tensorflow (CVSS 7.1)
- [CVE-2022-41911](https://cve.now/CVE-2022-41911.md): Invalid char to bool conversion when printing a tensor in Tensorflow (CVSS 4.8)
- [CVE-2022-41909](https://cve.now/CVE-2022-41909.md): Segfault in \`CompositeTensorVariantToComponents\` in Tensorflow (CVSS 4.8)
- [CVE-2022-41908](https://cve.now/CVE-2022-41908.md): \`CHECK\` fail via inputs in \`PyFunc\` in Tensorflow (CVSS 4.8)
- [CVE-2022-41907](https://cve.now/CVE-2022-41907.md): Overflow in \`ResizeNearestNeighborGrad\` in Tensorflow (CVSS 4.8)
- [CVE-2022-41901](https://cve.now/CVE-2022-41901.md): \`CHECK\_EQ\` fail via input in \`SparseMatrixNNZ\` in Tensorflow (CVSS 4.8)
- [CVE-2022-41900](https://cve.now/CVE-2022-41900.md): FractionalMaxPool and FractionalAVGPool heap out-of-bounds acess in Tensorflow (CVSS 7.1)
- [CVE-2022-41899](https://cve.now/CVE-2022-41899.md): \`CHECK\` fail via inputs in \`SdcaOptimizer\` in Tensorflow (CVSS 4.8)
- [CVE-2022-41898](https://cve.now/CVE-2022-41898.md): \`CHECK\` fail via inputs in \`SparseFillEmptyRowsGrad\` in Tensorflow (CVSS 4.8)
- [CVE-2022-41897](https://cve.now/CVE-2022-41897.md): \`FractionalMaxPoolGrad\` Heap out of bounds read in Tensorflow (CVSS 4.8)
- [CVE-2022-41896](https://cve.now/CVE-2022-41896.md): \`tf.raw\_ops.Mfcc\` crashes in Tensorflow (CVSS 4.8)
- [CVE-2022-41895](https://cve.now/CVE-2022-41895.md): \`MirrorPadGrad\` heap out of bounds read in Tensorflow (CVSS 4.8)
- [CVE-2022-41894](https://cve.now/CVE-2022-41894.md): Buffer overflow in \`CONV\_3D\_TRANSPOSE\` on TFLite (CVSS 7.1)
- [CVE-2022-41893](https://cve.now/CVE-2022-41893.md): \`CHECK\_EQ\` fail in \`tf.raw\_ops.TensorListResize\` in Tensorflow (CVSS 4.8)
- [CVE-2022-41891](https://cve.now/CVE-2022-41891.md): Segfault in \`tf.raw\_ops.TensorListConcat\` in Tensorflow (CVSS 4.8)
- [CVE-2022-41890](https://cve.now/CVE-2022-41890.md): \`CHECK\` fail in \`BCast\` overflow in Tensorflow (CVSS 4.8)
- [CVE-2022-41889](https://cve.now/CVE-2022-41889.md): Segfault via invalid attributes in \`pywrap\_tfe\_src.cc\` in Tensorflow (CVSS 5.5)
- [CVE-2022-41888](https://cve.now/CVE-2022-41888.md): Unckecked rank size in \`tf.image.generate\_bounding\_box\_proposals\` in Tensorflow (CVSS 4.8)
- [CVE-2022-41887](https://cve.now/CVE-2022-41887.md): Overflow in \`tf.keras.losses.poisson\` in Tensorflow (CVSS 4.8)
- [CVE-2022-41886](https://cve.now/CVE-2022-41886.md): Overflow in \`ImageProjectiveTransformV2\` in Tensorflow (CVSS 4.8)
- [CVE-2022-41885](https://cve.now/CVE-2022-41885.md): Overflow in \`FusedResizeAndPadConv2D\` in Tensorflow (CVSS 4.8)
- [CVE-2022-41884](https://cve.now/CVE-2022-41884.md): Seg fault in \`ndarray\_tensor\_bridge\` due to zero and large inputs in Tensorflow (CVSS 4.8)
- [CVE-2022-41883](https://cve.now/CVE-2022-41883.md): Out of bounds segmentation fault due to unequal op inputs in Tensorflow (CVSS 6.8)
- [CVE-2022-41880](https://cve.now/CVE-2022-41880.md): ThreadUnsafeUnigramCandidateSampler Heap out of bounds in Tensorflow (CVSS 6.8)
- [CVE-2022-36015](https://cve.now/CVE-2022-36015.md): Integer overflow in math ops in TensorFlow (CVSS 5.9)
- [CVE-2022-36012](https://cve.now/CVE-2022-36012.md): Assertion fail on MLIR empty edge names in TensorFlow (CVSS 5.9)
- [CVE-2022-35996](https://cve.now/CVE-2022-35996.md): Floating point exception in \`Conv2D\` in TensorFlow (CVSS 5.9)
- [CVE-2022-36027](https://cve.now/CVE-2022-36027.md): Segfault TFLite converter on per-channel quantized transposed convolutions in TensorFlow (CVSS 5.9)
- [CVE-2022-36017](https://cve.now/CVE-2022-36017.md): Segfault in \`Requantize\` in TensorFlow (CVSS 5.9)
- [CVE-2022-36014](https://cve.now/CVE-2022-36014.md): Null-dereference in \`mlir::tfg::TFOp::nameAttr\` in TensorFlow (CVSS 5.9)
- [CVE-2022-36000](https://cve.now/CVE-2022-36000.md): Null dereference on MLIR on empty function attributes in TensorFlow (CVSS 5.9)
- [CVE-2022-36011](https://cve.now/CVE-2022-36011.md): Null dereference on MLIR on empty function attributes in TensorFlow (CVSS 5.9)
- [CVE-2022-36013](https://cve.now/CVE-2022-36013.md): Null-dereference in \`mlir::tfg::GraphDefImporter::ConvertNodeDef\` in TensorFlow (CVSS 5.9)
- [CVE-2022-35994](https://cve.now/CVE-2022-35994.md): \`CHECK\` fail in \`CollectiveGather\` in TensorFlow (CVSS 5.9)
- [CVE-2022-35993](https://cve.now/CVE-2022-35993.md): \`CHECK\` fail in \`SetSize\` in TensorFlow (CVSS 5.9)
- [CVE-2022-35992](https://cve.now/CVE-2022-35992.md): \`CHECK\` fail in \`TensorListFromTensor\` in TensorFlow (CVSS 5.9)
- [CVE-2022-35991](https://cve.now/CVE-2022-35991.md): \`CHECK\` fail in \`TensorListScatter\` and \`TensorListScatterV2\` in TensorFlow (CVSS 5.9)
- [CVE-2022-35999](https://cve.now/CVE-2022-35999.md): \`CHECK\` fail in \`Conv2DBackpropInput\` in TensorFlow (CVSS 5.9)
- [CVE-2022-35998](https://cve.now/CVE-2022-35998.md): \`CHECK\` fail in \`EmptyTensorList\` in TensorFlow (CVSS 5.9)
- [CVE-2022-35997](https://cve.now/CVE-2022-35997.md): \`CHECK\` fail in \`tf.sparse.cross\` in TensorFlow (CVSS 5.9)
- [CVE-2022-35995](https://cve.now/CVE-2022-35995.md): \`CHECK\` fail in \`AudioSummaryV2\` in TensorFlow (CVSS 5.9)
- [CVE-2022-36016](https://cve.now/CVE-2022-36016.md): \`CHECK\`-fail in \`tensorflow::full\_type::SubstituteFromAttrs\` in TensorFlow (CVSS 5.9)
- [CVE-2022-36005](https://cve.now/CVE-2022-36005.md): \`CHECK\` fail in \`FakeQuantWithMinMaxVarsGradient\` in TensorFlow (CVSS 5.9)
- [CVE-2022-36004](https://cve.now/CVE-2022-36004.md): \`CHECK\` fail in \`tf.random.gamma\` in TensorFlow (CVSS 5.9)
- [CVE-2022-36003](https://cve.now/CVE-2022-36003.md): \`CHECK\` fail in \`RandomPoissonV2\` in TensorFlow (CVSS 5.9)
- [CVE-2022-36002](https://cve.now/CVE-2022-36002.md): \`CHECK\` fail in \`Unbatch\` in TensorFlow (CVSS 5.9)
- [CVE-2022-36001](https://cve.now/CVE-2022-36001.md): \`CHECK\` fail in \`DrawBoundingBoxes\` in TensorFlow (CVSS 5.9)
- [CVE-2022-36026](https://cve.now/CVE-2022-36026.md): \`CHECK\` fail in \`QuantizeAndDequantizeV3\` in TensorFlow (CVSS 5.9)
- [CVE-2022-36018](https://cve.now/CVE-2022-36018.md): \`CHECK\` fail in \`RaggedTensorToVariant\` in TensorFlow (CVSS 5.9)
- [CVE-2022-36019](https://cve.now/CVE-2022-36019.md): \`CHECK\` fail in \`FakeQuantWithMinMaxVarsPerChannel\` in TensorFlow (CVSS 5.9)
- [CVE-2022-35990](https://cve.now/CVE-2022-35990.md): \`CHECK\` fail in \`FakeQuantWithMinMaxVarsPerChannelGradient\` in TensorFlow (CVSS 5.9)
- [CVE-2022-35986](https://cve.now/CVE-2022-35986.md): Segfault in \`RaggedBincount\` in TensorFlow (CVSS 5.9)
- [CVE-2022-35987](https://cve.now/CVE-2022-35987.md): \`CHECK\` fail in \`DenseBincount\` in TensorFlow (CVSS 5.9)
- [CVE-2022-35985](https://cve.now/CVE-2022-35985.md): \`CHECK\` fail in \`LRNGrad\` in TensorFlow (CVSS 5.9)
- [CVE-2022-35984](https://cve.now/CVE-2022-35984.md): \`CHECK\` fail in \`ParameterizedTruncatedNormal\` in TensorFlow (CVSS 5.9)
- [CVE-2022-35983](https://cve.now/CVE-2022-35983.md): \`CHECK\` fail in \`Save\` and \`SaveSlices\` in TensorFlow (CVSS 5.9)
- [CVE-2022-35989](https://cve.now/CVE-2022-35989.md): \`CHECK\` fail in \`MaxPool\` in TensorFlow (CVSS 5.9)
- [CVE-2022-35988](https://cve.now/CVE-2022-35988.md): \`CHECK\` fail in \`tf.linalg.matrix\_rank\` in TensorFlow (CVSS 5.9)
- [CVE-2022-35982](https://cve.now/CVE-2022-35982.md): Segfault in \`SparseBincount\` in TensorFlow (CVSS 5.9)
- [CVE-2022-35981](https://cve.now/CVE-2022-35981.md): \`CHECK\` fail in \`FractionalMaxPoolGrad\` in TensorFlow (CVSS 5.9)
- [CVE-2022-35979](https://cve.now/CVE-2022-35979.md): Segfault in \`QuantizedRelu\` and \`QuantizedRelu6\` (CVSS 5.9)
- [CVE-2022-35974](https://cve.now/CVE-2022-35974.md): Segfault in \`QuantizeDownAndShrinkRange\` in TensorFlow (CVSS 5.9)
- [CVE-2022-35972](https://cve.now/CVE-2022-35972.md): Segfault in \`QuantizedBiasAdd\` in TensorFlow (CVSS 5.9)
- [CVE-2022-35973](https://cve.now/CVE-2022-35973.md): Segfault in \`QuantizedMatMul\` in TensorFlow (CVSS 5.9)
- [CVE-2022-35971](https://cve.now/CVE-2022-35971.md): \`CHECK\` fail in \`FakeQuantWithMinMaxVars\` in TensorFlow (CVSS 5.9)
- [CVE-2022-35969](https://cve.now/CVE-2022-35969.md): \`CHECK\` fail in \`Conv2DBackpropInput\` in TensorFlow (CVSS 5.9)
- [CVE-2022-35970](https://cve.now/CVE-2022-35970.md): Segfault in \`QuantizedInstanceNorm\` in TensorFlow (CVSS 5.9)
- [CVE-2022-35968](https://cve.now/CVE-2022-35968.md): \`CHECK\` fail in \`AvgPoolGrad\` in TensorFlow (CVSS 5.9)
- [CVE-2022-35966](https://cve.now/CVE-2022-35966.md): Segfault in \`QuantizedAvgPool\` in TensorFlow (CVSS 5.9)
- [CVE-2022-35967](https://cve.now/CVE-2022-35967.md): Segfault in \`QuantizedAdd\` in TensorFlow (CVSS 5.9)
- [CVE-2022-35964](https://cve.now/CVE-2022-35964.md): Segfault in \`BlockLSTMGradV2\` in TensorFlow (CVSS 5.9)
- [CVE-2022-35965](https://cve.now/CVE-2022-35965.md): Segfault in \`LowerBound\` and \`UpperBound\` in TensorFlow (CVSS 5.9)
- [CVE-2022-35963](https://cve.now/CVE-2022-35963.md): \`CHECK\` failures in \`FractionalAvgPoolGrad\` in TensorFlow (CVSS 5.9)
- [CVE-2022-35960](https://cve.now/CVE-2022-35960.md): \`CHECK\` failure in \`TensorListReserve\` in TensorFlow (CVSS 5.9)
- [CVE-2022-35959](https://cve.now/CVE-2022-35959.md): \`CHECK\` failures in \`AvgPool3DGrad\` in TensorFlow (CVSS 5.9)
- [CVE-2022-35952](https://cve.now/CVE-2022-35952.md): \`CHECK\` failures in \`UnbatchGradOp\` in TensorFlow (CVSS 5.9)
- [CVE-2022-35940](https://cve.now/CVE-2022-35940.md): Int overflow in \`RaggedRangeOp\` in Tensoflow (CVSS 5.9)
- [CVE-2022-35941](https://cve.now/CVE-2022-35941.md): \`CHECK\` failure in \`AvgPoolOp\` in Tensorflow (CVSS 5.9)
- [CVE-2022-35937](https://cve.now/CVE-2022-35937.md): OOB read in \`Gather\_nd\` op in TensorFlow Lite (CVSS 7.0)
- [CVE-2022-35939](https://cve.now/CVE-2022-35939.md): Out of bounds write in \`scatter\_nd\` op in TensorFlow Lite (CVSS 7.0)
- [CVE-2022-35935](https://cve.now/CVE-2022-35935.md): \`CHECK\` failure in \`SobolSample\` via missing validation in TensorFlow (CVSS 5.9)
- [CVE-2022-35938](https://cve.now/CVE-2022-35938.md): OOB read in \`Gather\_nd\` op in TensorFlow Lite Micro (CVSS 7.0)
- [CVE-2022-35934](https://cve.now/CVE-2022-35934.md): \`CHECK\` failure in tf.reshape in Tensorflow (CVSS 5.9)
- [CVE-2022-29216](https://cve.now/CVE-2022-29216.md): Code injection in \`saved\_model\_cli\` in TensorFlow (CVSS 7.8)
- [CVE-2022-29213](https://cve.now/CVE-2022-29213.md): Incomplete validation in signal ops leads to crashes in TensorFlow (CVSS 5.5)
- [CVE-2022-29210](https://cve.now/CVE-2022-29210.md): Heap buffer overflow due to incorrect hash function in TensorFlow (CVSS 5.5)
- [CVE-2022-29209](https://cve.now/CVE-2022-29209.md): Type confusion leading to \`CHECK\`-failure based denial of service in TensorFlow (CVSS 5.5)
- [CVE-2022-29211](https://cve.now/CVE-2022-29211.md): Segfault in TensorFlow if \`tf.histogram\_fixed\_width\` is called with NaN values (CVSS 5.5)
- [CVE-2022-29212](https://cve.now/CVE-2022-29212.md): Core dump when loading TFLite models with quantization in TensorFlow (CVSS 5.5)
- [CVE-2022-29201](https://cve.now/CVE-2022-29201.md): Missing validation in \`QuantizedConv2D\` results in undefined behavior in TensorFlow (CVSS 5.5)
- [CVE-2022-29202](https://cve.now/CVE-2022-29202.md): Denial of service in TensorFlow due to lack of validation in \`tf.ragged.constant\` (CVSS 5.5)
- [CVE-2022-29203](https://cve.now/CVE-2022-29203.md): Integer overflow in \`SpaceToBatchND\` in TensorFlow (CVSS 5.5)
- [CVE-2022-29204](https://cve.now/CVE-2022-29204.md): Missing validation causes denial of service in TensorFlow via \`Conv3DBackpropFilterV2\` (CVSS 5.5)
- [CVE-2022-29208](https://cve.now/CVE-2022-29208.md): Segfault and Out-of-bounds Write write due to incomplete validation in TensorFlow (CVSS 7.1)
- [CVE-2022-29205](https://cve.now/CVE-2022-29205.md): Segfault due to missing support for quantized types in TensorFlow (CVSS 5.5)
- [CVE-2022-29206](https://cve.now/CVE-2022-29206.md): Missing validation results in undefined behavior in \`SparseTensorDenseAdd\` in TensorFlow (CVSS 5.5)
- [CVE-2022-29207](https://cve.now/CVE-2022-29207.md): Undefined behavior when users supply invalid resource handles in TensorFlow (CVSS 5.5)
- [CVE-2022-29195](https://cve.now/CVE-2022-29195.md): Missing validation causes denial of service in TensorFlow via \`StagePeek\` (CVSS 5.5)
- [CVE-2022-29197](https://cve.now/CVE-2022-29197.md): Missing validation causes denial of service in TensorFlow via \`UnsortedSegmentJoin\` (CVSS 5.5)
- [CVE-2022-29196](https://cve.now/CVE-2022-29196.md): Missing validation causes denial of service in TensorFlow via \`Conv3DBackpropFilterV2\` (CVSS 5.5)
- [CVE-2022-29198](https://cve.now/CVE-2022-29198.md): Missing validation causes denial of service in TensorFlow via \`SparseTensorToCSRSparseMatrix\` (CVSS 5.5)
- [CVE-2022-29199](https://cve.now/CVE-2022-29199.md): Missing validation causes denial of service in TensorFlow via \`LoadAndRemapMatrix\` (CVSS 5.5)
- [CVE-2022-29200](https://cve.now/CVE-2022-29200.md): Missing validation causes denial of service in TensorFlow via \`LSTMBlockCell\` (CVSS 5.5)
- [CVE-2022-29193](https://cve.now/CVE-2022-29193.md): Missing validation causes \`TensorSummaryV2\` in TensorFlow to crash (CVSS 5.5)
- [CVE-2022-29194](https://cve.now/CVE-2022-29194.md): Missing validation causes denial of service via \`DeleteSessionTensor\` in TensorFlow (CVSS 5.5)
- [CVE-2022-29191](https://cve.now/CVE-2022-29191.md): Missing validation causes denial of service via \`GetSessionTensor\` in TensorFlow (CVSS 5.5)
- [CVE-2022-29192](https://cve.now/CVE-2022-29192.md): Missing validation crashes \`QuantizeAndDequantizeV4Grad\` in TensorFlow (CVSS 5.5)
- [CVE-2022-23561](https://cve.now/CVE-2022-23561.md): Out of bounds write in TFLite (CVSS 8.8)
- [CVE-2022-23557](https://cve.now/CVE-2022-23557.md): Division by zero in TFLite (CVSS 6.5)
- [CVE-2022-23558](https://cve.now/CVE-2022-23558.md): Integer overflow in TFLite array creation (CVSS 7.6)
- [CVE-2022-23570](https://cve.now/CVE-2022-23570.md): Null-dereference in Tensorflow (CVSS 6.5)
- [CVE-2022-23564](https://cve.now/CVE-2022-23564.md): Reachable Assertion in Tensorflow (CVSS 6.5)
- [CVE-2022-23565](https://cve.now/CVE-2022-23565.md): \`CHECK\`-failures in Tensorflow (CVSS 6.5)
- [CVE-2022-23562](https://cve.now/CVE-2022-23562.md): Integer overflow in Tensorflow (CVSS 7.6)
- [CVE-2022-23563](https://cve.now/CVE-2022-23563.md): Insecure temporary file in Tensorflow (CVSS 7.1)
- [CVE-2022-23559](https://cve.now/CVE-2022-23559.md): Integer overflow in TFLite (CVSS 8.8)
- [CVE-2022-23560](https://cve.now/CVE-2022-23560.md): Read and Write outside of bounds in TFLite (CVSS 8.8)
- [CVE-2022-23574](https://cve.now/CVE-2022-23574.md): Out of bounds read and write in Tensorflow (CVSS 8.8)
- [CVE-2022-23571](https://cve.now/CVE-2022-23571.md): Reachable Assertion in Tensorflow (CVSS 6.5)
- [CVE-2022-23566](https://cve.now/CVE-2022-23566.md): Out of bounds write in Tensorflow (CVSS 8.8)
- [CVE-2022-23577](https://cve.now/CVE-2022-23577.md): Null-dereference in Tensorflow (CVSS 6.5)
- [CVE-2022-23578](https://cve.now/CVE-2022-23578.md): Memory leak in Tensorflow (CVSS 4.3)
- [CVE-2022-23572](https://cve.now/CVE-2022-23572.md): Crash when type cannot be specialized in Tensorflow (CVSS 6.5)
- [CVE-2022-23573](https://cve.now/CVE-2022-23573.md): Uninitialized variable access in Tensorflow (CVSS 7.6)
- [CVE-2022-23585](https://cve.now/CVE-2022-23585.md): Memory leak in decoding PNG images in Tensorflow (CVSS 4.3)
- [CVE-2022-23579](https://cve.now/CVE-2022-23579.md): \`CHECK\`-failures during Grappler's \`SafeToRemoveIdentity\` in Tensorflow (CVSS 6.5)
- [CVE-2022-23580](https://cve.now/CVE-2022-23580.md): Abort caused by allocating a vector that is too large in Tensorflow (CVSS 6.5)
- [CVE-2022-23581](https://cve.now/CVE-2022-23581.md): \`CHECK\`-failures during Grappler's \`IsSimplifiableReshape\` in Tensorflow (CVSS 6.5)
- [CVE-2022-23575](https://cve.now/CVE-2022-23575.md): Integer overflow in Tensorflow (CVSS 6.5)
- [CVE-2022-23576](https://cve.now/CVE-2022-23576.md): Integer overflow in Tensorflow (CVSS 6.5)
- [CVE-2022-23588](https://cve.now/CVE-2022-23588.md): \`CHECK\`-fails due to attempting to build a reference tensor in Tensorflow (CVSS 6.5)
- [CVE-2022-23589](https://cve.now/CVE-2022-23589.md): Null pointer dereference in Grappler's \`IsConstant\` in Tensorflow (CVSS 6.5)
- [CVE-2022-23586](https://cve.now/CVE-2022-23586.md): Multiple \`CHECK\`-fails in \`function.cc\` in Tensorflow (CVSS 6.5)
- [CVE-2022-23583](https://cve.now/CVE-2022-23583.md): \`CHECK\`-failures in binary ops in Tensorflow (CVSS 6.5)
- [CVE-2022-23582](https://cve.now/CVE-2022-23582.md): \`CHECK\`-failures in \`TensorByteSize\` in Tensorflow (CVSS 6.5)
- [CVE-2022-23584](https://cve.now/CVE-2022-23584.md): Use after free in \`DecodePng\` in Tensorflow (CVSS 7.6)
- [CVE-2022-23592](https://cve.now/CVE-2022-23592.md): Out of bounds read in Tensorflow (CVSS 8.1)
- [CVE-2022-23587](https://cve.now/CVE-2022-23587.md): Integer overflow in Tensorflow (CVSS 8.8)
- [CVE-2022-23595](https://cve.now/CVE-2022-23595.md): Null pointer dereference in TensorFlow (CVSS 5.3)
- [CVE-2022-23594](https://cve.now/CVE-2022-23594.md): Out of bounds read in Tensorflow (CVSS 8.8)
- [CVE-2022-23590](https://cve.now/CVE-2022-23590.md): Crash due to erroneous \`StatusOr\` in Tensorflow (CVSS 5.9)
- [CVE-2022-23591](https://cve.now/CVE-2022-23591.md): Stack overflow in Tensorflow (CVSS 7.5)
- [CVE-2022-23593](https://cve.now/CVE-2022-23593.md): Segfault in \`simplifyBroadcast\` in Tensorflow (CVSS 5.9)
- [CVE-2021-41227](https://cve.now/CVE-2021-41227.md): Arbitrary memory read in \`ImmutableConst\` (CVSS 6.6)
- [CVE-2021-41225](https://cve.now/CVE-2021-41225.md): A use of uninitialized value vulnerability in Tensorflow (CVSS 5.5)
- [CVE-2021-41222](https://cve.now/CVE-2021-41222.md): Segfault due to negative splits in \`SplitV\` (CVSS 5.5)
- [CVE-2021-41228](https://cve.now/CVE-2021-41228.md): Code injection in \`saved\_model\_cli\` (CVSS 7.5)
- [CVE-2021-41220](https://cve.now/CVE-2021-41220.md): Use after free in \`CollectiveReduceV2\` (CVSS 7.8)
- [CVE-2021-41221](https://cve.now/CVE-2021-41221.md): Access to invalid memory during shape inference in \`Cudnn\*\` ops (CVSS 7.8)
- [CVE-2021-41216](https://cve.now/CVE-2021-41216.md): Heap buffer overflow in \`Transpose\` (CVSS 5.5)
- [CVE-2021-41213](https://cve.now/CVE-2021-41213.md): Deadlock in mutually recursive \`tf.function\` objects (CVSS 5.5)
- [CVE-2021-41218](https://cve.now/CVE-2021-41218.md): Integer division by 0 in \`tf.raw\_ops.AllToAll\` (CVSS 5.5)
- [CVE-2021-41206](https://cve.now/CVE-2021-41206.md): Incomplete validation of shapes in multiple TF ops (CVSS 7.0)
- [CVE-2021-41208](https://cve.now/CVE-2021-41208.md): Incomplete validation in boosted trees code (CVSS 8.8)
- [CVE-2021-41207](https://cve.now/CVE-2021-41207.md): Division by zero in \`ParallelConcat\` (CVSS 5.5)
- [CVE-2021-41202](https://cve.now/CVE-2021-41202.md): Overflow/crash in \`tf.range\` (CVSS 5.5)
- [CVE-2021-41209](https://cve.now/CVE-2021-41209.md): FPE in convolutions with zero size filters (CVSS 5.5)
- [CVE-2021-41203](https://cve.now/CVE-2021-41203.md): Missing validation during checkpoint loading (CVSS 7.8)
- [CVE-2021-41215](https://cve.now/CVE-2021-41215.md): Null pointer exception in \`DeserializeSparse\` (CVSS 5.5)
- [CVE-2021-41217](https://cve.now/CVE-2021-41217.md): Null pointer exception when \`Exit\` node is not preceded by \`Enter\` op (CVSS 5.5)
- [CVE-2021-41219](https://cve.now/CVE-2021-41219.md): Undefined behavior via \`nullptr\` reference binding in sparse matrix multiplication (CVSS 7.8)
- [CVE-2021-41214](https://cve.now/CVE-2021-41214.md): Reference binding to \`nullptr\` in \`tf.ragged.cross\` (CVSS 7.8)
- [CVE-2021-41204](https://cve.now/CVE-2021-41204.md): Segfault while copying constant resource tensor (CVSS 5.5)
- [CVE-2021-41226](https://cve.now/CVE-2021-41226.md): Heap OOB read in \`SparseBinCount\` (CVSS 7.1)
- [CVE-2021-41223](https://cve.now/CVE-2021-41223.md): Heap OOB read in \`FusedBatchNorm\` kernels (CVSS 7.1)
- [CVE-2021-41224](https://cve.now/CVE-2021-41224.md): \`SparseFillEmptyRows\` heap OOB read (CVSS 7.1)
- [CVE-2021-41212](https://cve.now/CVE-2021-41212.md): Heap OOB read in \`tf.ragged.cross\` (CVSS 7.1)
- [CVE-2021-41211](https://cve.now/CVE-2021-41211.md): Heap OOB read in shape inference for \`QuantizeV2\` (CVSS 7.1)
- [CVE-2021-41205](https://cve.now/CVE-2021-41205.md): Heap OOB read in all \`tf.raw\_ops.QuantizeAndDequantizeV\*\` ops (CVSS 7.1)
- [CVE-2021-41210](https://cve.now/CVE-2021-41210.md): Heap OOB read in \`tf.raw\_ops.SparseCountSparseOutput\` (CVSS 7.1)
- [CVE-2021-41201](https://cve.now/CVE-2021-41201.md): Unitialized access in \`EinsumHelper::ParseEquation\` (CVSS 7.8)
- [CVE-2021-41200](https://cve.now/CVE-2021-41200.md): Incomplete validation in \`tf.summary.create\_file\_writer\` (CVSS 5.5)
- [CVE-2021-41197](https://cve.now/CVE-2021-41197.md): Crashes due to overflow and \`CHECK\`-fail in ops with large tensor shapes (CVSS 5.5)
- [CVE-2021-41198](https://cve.now/CVE-2021-41198.md): Overflow/crash in \`tf.tile\` when tiling tensor is large (CVSS 5.5)
- [CVE-2021-41199](https://cve.now/CVE-2021-41199.md): Overflow/crash in \`tf.image.resize\` when size is large (CVSS 5.5)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/tensorflow
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.