{"items":[{"id":"CVE-2026-2492","published":"2026-02-20T22:22:54.392Z","updated":"2026-07-15T01:16:40.339Z","title":"TensorFlow HDF5 Library Uncontrolled Search Path Element Local Privilege Escalation Vulnerability","severity":"HIGH","score":7,"vendor":"TensorFlow","product":"TensorFlow","kev":false,"epss":0.00286,"kevAdded":null},{"id":"CVE-2023-33976","published":"2024-07-30T19:27:14.532Z","updated":"2024-08-02T15:54:14.208Z","title":"TensorFlow segfault in array_ops.upper_bound","severity":"HIGH","score":7.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00432,"kevAdded":null},{"id":"CVE-2024-3660","published":"2024-04-16T20:09:26.220Z","updated":"2025-02-13T17:52:58.005Z","title":"Arbitrary code injection vulnerability in Keras framework < 2.13","severity":"CRITICAL","score":9.8,"vendor":"tensorflow","product":"keras","kev":false,"epss":0.01745,"kevAdded":null},{"id":"CVE-2023-25661","published":"2023-03-27T19:52:07.826Z","updated":"2025-02-19T15:26:33.556Z","title":"Denial of Service in TensorFlow","severity":"MEDIUM","score":6.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00436,"kevAdded":null},{"id":"CVE-2023-25660","published":"2023-03-24T23:44:30.233Z","updated":"2025-02-19T20:30:18.395Z","title":"TensorFlow vulnerable to seg fault in `tf.raw_ops.Print`","severity":"HIGH","score":7.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00394,"kevAdded":null},{"id":"CVE-2023-25659","published":"2023-03-24T23:43:26.319Z","updated":"2025-02-19T20:34:37.363Z","title":"TensorFlow vulnerable to Out-of-Bounds Read in DynamicStitch","severity":"HIGH","score":7.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00394,"kevAdded":null},{"id":"CVE-2023-25658","published":"2023-03-24T23:42:46.482Z","updated":"2025-02-19T20:13:29.872Z","title":"TensorFlow vulnerable to Out-of-Bounds Read in GRUBlockCellGrad","severity":"HIGH","score":7.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00387,"kevAdded":null},{"id":"CVE-2023-25662","published":"2023-03-24T23:41:15.425Z","updated":"2025-02-19T20:37:37.902Z","title":"TensorFlow vulnerable to integer overflow in EditDistance","severity":"HIGH","score":7.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00394,"kevAdded":null},{"id":"CVE-2023-25663","published":"2023-03-24T23:40:59.362Z","updated":"2025-02-19T20:38:24.943Z","title":"TensorFlow has Null Pointer Error in TensorArrayConcatV2","severity":"HIGH","score":7.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00394,"kevAdded":null},{"id":"CVE-2023-25664","published":"2023-03-24T23:40:40.590Z","updated":"2025-02-19T20:39:09.427Z","title":"TensorFlow vulnerable to Heap Buffer Overflow in AvgPoolGrad","severity":"HIGH","score":7.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00415,"kevAdded":null},{"id":"CVE-2023-25667","published":"2023-03-24T23:40:20.893Z","updated":"2025-02-19T20:39:52.657Z","title":"TensorFlow vulnerable to segfault when opening multiframe gif","severity":"MEDIUM","score":6.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00308,"kevAdded":null},{"id":"CVE-2023-25666","published":"2023-03-24T23:39:55.696Z","updated":"2025-02-19T20:40:39.166Z","title":"TensorFlow has Floating Point Exception in AudioSpectrogram","severity":"HIGH","score":7.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00387,"kevAdded":null},{"id":"CVE-2023-25665","published":"2023-03-24T23:39:26.921Z","updated":"2025-02-19T20:31:10.311Z","title":"TensorFlow has Null Pointer Error in SparseSparseMaximum","severity":"HIGH","score":7.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00443,"kevAdded":null},{"id":"CVE-2023-25668","published":"2023-03-24T23:33:50.296Z","updated":"2025-02-19T20:32:48.754Z","title":"TensorFlow vulnerable to heap out-of-buffer read in the QuantizeAndDequantize operation","severity":"CRITICAL","score":9.8,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00838,"kevAdded":null},{"id":"CVE-2023-25669","published":"2023-03-24T23:32:57.394Z","updated":"2025-02-19T20:33:36.588Z","title":"TensorFlow has Floating Point Exception in AvgPoolGrad with XLA","severity":"HIGH","score":7.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00394,"kevAdded":null},{"id":"CVE-2023-25670","published":"2023-03-24T23:32:12.780Z","updated":"2025-02-19T20:41:24.650Z","title":"TensorFlow has Null Pointer Error in QuantizedMatMulWithBiasAndDequantize","severity":"HIGH","score":7.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00394,"kevAdded":null},{"id":"CVE-2023-25671","published":"2023-03-24T23:31:40.731Z","updated":"2025-02-19T20:42:24.351Z","title":"TensorFlow has segmentation fault in tfg-translate","severity":"HIGH","score":7.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.0052,"kevAdded":null},{"id":"CVE-2023-25672","published":"2023-03-24T23:31:05.995Z","updated":"2025-02-19T20:14:18.905Z","title":"TensorFlow has Null Pointer Error in LookupTableImportV2","severity":"HIGH","score":7.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00361,"kevAdded":null},{"id":"CVE-2023-25673","published":"2023-03-24T23:30:41.556Z","updated":"2025-02-19T20:15:52.572Z","title":"TensorFlow has Floating Point Exception in TensorListSplit with XLA","severity":"HIGH","score":7.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00394,"kevAdded":null},{"id":"CVE-2023-25674","published":"2023-03-24T23:13:05.753Z","updated":"2025-02-19T20:16:15.143Z","title":"TensorFlow has Null Pointer Error in RandomShuffle with XLA enable","severity":"HIGH","score":7.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00394,"kevAdded":null},{"id":"CVE-2023-25675","published":"2023-03-24T23:11:30.782Z","updated":"2025-02-19T20:23:37.641Z","title":"TensorFlow has Segfault in Bincount with XLA","severity":"HIGH","score":7.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00394,"kevAdded":null},{"id":"CVE-2023-25676","published":"2023-03-24T23:10:30.431Z","updated":"2025-02-19T20:43:21.228Z","title":"TensorFlow has null dereference on ParallelConcat with XLA","severity":"HIGH","score":7.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00394,"kevAdded":null},{"id":"CVE-2023-25801","published":"2023-03-24T23:08:50.251Z","updated":"2025-02-19T20:44:31.150Z","title":"TensorFlow has double free in Fractional(Max/Avg)Pool","severity":"HIGH","score":8,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.0015,"kevAdded":null},{"id":"CVE-2023-27579","published":"2023-03-24T23:05:09.206Z","updated":"2025-02-19T20:45:08.642Z","title":"TensorFlow has Floating Point Exception in TFLite in conv kernel","severity":"HIGH","score":7.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00394,"kevAdded":null},{"id":"CVE-2022-41910","published":"2022-12-06T00:00:00.000Z","updated":"2025-04-23T16:32:26.257Z","title":"Heap out of bounds read in `QuantizeAndDequantizeV2` in Tensorflow","severity":"MEDIUM","score":4.8,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00439,"kevAdded":null},{"id":"CVE-2022-41902","published":"2022-12-06T00:00:00.000Z","updated":"2025-04-23T16:32:33.413Z","title":"Out of bounds write in grappler in Tensorflow","severity":"HIGH","score":7.1,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00492,"kevAdded":null},{"id":"CVE-2022-41911","published":"2022-11-18T00:00:00.000Z","updated":"2025-04-23T16:36:49.951Z","title":"Invalid char to bool conversion when printing a tensor in Tensorflow","severity":"MEDIUM","score":4.8,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00444,"kevAdded":null},{"id":"CVE-2022-41909","published":"2022-11-18T00:00:00.000Z","updated":"2025-04-22T16:02:49.290Z","title":"Segfault in `CompositeTensorVariantToComponents` in Tensorflow","severity":"MEDIUM","score":4.8,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00549,"kevAdded":null},{"id":"CVE-2022-41908","published":"2022-11-18T00:00:00.000Z","updated":"2025-04-22T16:02:59.540Z","title":"`CHECK` fail via inputs in `PyFunc` in Tensorflow","severity":"MEDIUM","score":4.8,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00504,"kevAdded":null},{"id":"CVE-2022-41907","published":"2022-11-18T00:00:00.000Z","updated":"2025-04-22T16:03:11.875Z","title":"Overflow in `ResizeNearestNeighborGrad` in Tensorflow","severity":"MEDIUM","score":4.8,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00494,"kevAdded":null},{"id":"CVE-2022-41901","published":"2022-11-18T00:00:00.000Z","updated":"2025-04-22T16:03:23.623Z","title":"`CHECK_EQ` fail via input in `SparseMatrixNNZ` in Tensorflow","severity":"MEDIUM","score":4.8,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00494,"kevAdded":null},{"id":"CVE-2022-41900","published":"2022-11-18T00:00:00.000Z","updated":"2025-04-22T16:03:33.028Z","title":"FractionalMaxPool and FractionalAVGPool heap out-of-bounds acess in Tensorflow","severity":"HIGH","score":7.1,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00658,"kevAdded":null},{"id":"CVE-2022-41899","published":"2022-11-18T00:00:00.000Z","updated":"2025-04-22T16:03:45.167Z","title":"`CHECK` fail via inputs in `SdcaOptimizer` in Tensorflow","severity":"MEDIUM","score":4.8,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00494,"kevAdded":null},{"id":"CVE-2022-41898","published":"2022-11-18T00:00:00.000Z","updated":"2025-04-22T16:04:00.508Z","title":"`CHECK` fail via inputs in `SparseFillEmptyRowsGrad` in Tensorflow","severity":"MEDIUM","score":4.8,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00494,"kevAdded":null},{"id":"CVE-2022-41897","published":"2022-11-18T00:00:00.000Z","updated":"2025-04-22T16:04:11.757Z","title":"`FractionalMaxPoolGrad` Heap out of bounds read in Tensorflow","severity":"MEDIUM","score":4.8,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00494,"kevAdded":null},{"id":"CVE-2022-41896","published":"2022-11-18T00:00:00.000Z","updated":"2025-04-22T16:04:23.087Z","title":"`tf.raw_ops.Mfcc` crashes in Tensorflow","severity":"MEDIUM","score":4.8,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00494,"kevAdded":null},{"id":"CVE-2022-41895","published":"2022-11-18T00:00:00.000Z","updated":"2025-04-22T16:04:44.581Z","title":"`MirrorPadGrad` heap out of bounds read in Tensorflow","severity":"MEDIUM","score":4.8,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00494,"kevAdded":null},{"id":"CVE-2022-41894","published":"2022-11-18T00:00:00.000Z","updated":"2025-04-22T16:04:55.192Z","title":"Buffer overflow in `CONV_3D_TRANSPOSE` on TFLite","severity":"HIGH","score":7.1,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00586,"kevAdded":null},{"id":"CVE-2022-41893","published":"2022-11-18T00:00:00.000Z","updated":"2025-04-22T16:05:11.169Z","title":"`CHECK_EQ` fail in `tf.raw_ops.TensorListResize` in Tensorflow","severity":"MEDIUM","score":4.8,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00493,"kevAdded":null},{"id":"CVE-2022-41891","published":"2022-11-18T00:00:00.000Z","updated":"2025-04-22T16:05:23.222Z","title":"Segfault in `tf.raw_ops.TensorListConcat` in Tensorflow","severity":"MEDIUM","score":4.8,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00482,"kevAdded":null},{"id":"CVE-2022-41890","published":"2022-11-18T00:00:00.000Z","updated":"2025-04-22T16:05:33.026Z","title":"`CHECK` fail in `BCast` overflow in Tensorflow","severity":"MEDIUM","score":4.8,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00493,"kevAdded":null},{"id":"CVE-2022-41889","published":"2022-11-18T00:00:00.000Z","updated":"2025-04-22T16:05:44.120Z","title":"Segfault via invalid attributes in `pywrap_tfe_src.cc` in Tensorflow","severity":"MEDIUM","score":5.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00451,"kevAdded":null},{"id":"CVE-2022-41888","published":"2022-11-18T00:00:00.000Z","updated":"2025-04-22T16:06:00.864Z","title":"Unckecked rank size in `tf.image.generate_bounding_box_proposals` in Tensorflow","severity":"MEDIUM","score":4.8,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00493,"kevAdded":null},{"id":"CVE-2022-41887","published":"2022-11-18T00:00:00.000Z","updated":"2025-04-22T16:06:20.833Z","title":"Overflow in `tf.keras.losses.poisson` in Tensorflow","severity":"MEDIUM","score":4.8,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00493,"kevAdded":null},{"id":"CVE-2022-41886","published":"2022-11-18T00:00:00.000Z","updated":"2025-04-22T16:06:37.773Z","title":"Overflow in `ImageProjectiveTransformV2` in Tensorflow","severity":"MEDIUM","score":4.8,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00482,"kevAdded":null},{"id":"CVE-2022-41885","published":"2022-11-18T00:00:00.000Z","updated":"2025-04-22T16:06:46.870Z","title":"Overflow in `FusedResizeAndPadConv2D` in Tensorflow","severity":"MEDIUM","score":4.8,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00472,"kevAdded":null},{"id":"CVE-2022-41884","published":"2022-11-18T00:00:00.000Z","updated":"2025-04-22T16:06:54.684Z","title":"Seg fault in `ndarray_tensor_bridge` due to zero and large inputs in Tensorflow","severity":"MEDIUM","score":4.8,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.0037,"kevAdded":null},{"id":"CVE-2022-41883","published":"2022-11-18T00:00:00.000Z","updated":"2025-04-22T16:07:05.864Z","title":"Out of bounds segmentation fault due to unequal op inputs in Tensorflow","severity":"MEDIUM","score":6.8,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00384,"kevAdded":null},{"id":"CVE-2022-41880","published":"2022-11-18T00:00:00.000Z","updated":"2025-04-22T16:07:13.537Z","title":"ThreadUnsafeUnigramCandidateSampler Heap out of bounds in Tensorflow","severity":"MEDIUM","score":6.8,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00427,"kevAdded":null},{"id":"CVE-2022-36015","published":"2022-09-16T22:55:21.000Z","updated":"2025-04-23T16:58:53.732Z","title":"Integer overflow in math ops in TensorFlow","severity":"MEDIUM","score":5.9,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00701,"kevAdded":null},{"id":"CVE-2022-36012","published":"2022-09-16T22:55:15.000Z","updated":"2025-04-23T16:58:59.855Z","title":"Assertion fail on MLIR empty edge names in TensorFlow","severity":"MEDIUM","score":5.9,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00701,"kevAdded":null},{"id":"CVE-2022-35996","published":"2022-09-16T22:55:10.000Z","updated":"2025-04-23T16:59:06.532Z","title":"Floating point exception in `Conv2D` in TensorFlow","severity":"MEDIUM","score":5.9,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00478,"kevAdded":null},{"id":"CVE-2022-36027","published":"2022-09-16T22:50:16.000Z","updated":"2025-04-22T17:21:16.099Z","title":"Segfault TFLite converter on per-channel quantized transposed convolutions in TensorFlow","severity":"MEDIUM","score":5.9,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00765,"kevAdded":null},{"id":"CVE-2022-36017","published":"2022-09-16T22:50:10.000Z","updated":"2025-04-23T16:59:12.195Z","title":"Segfault in `Requantize` in TensorFlow","severity":"MEDIUM","score":5.9,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.0051,"kevAdded":null},{"id":"CVE-2022-36014","published":"2022-09-16T22:35:11.000Z","updated":"2025-04-23T16:59:17.921Z","title":"Null-dereference in `mlir::tfg::TFOp::nameAttr` in TensorFlow","severity":"MEDIUM","score":5.9,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00717,"kevAdded":null},{"id":"CVE-2022-36000","published":"2022-09-16T22:30:25.000Z","updated":"2025-04-23T16:59:23.193Z","title":"Null dereference on MLIR on empty function attributes in TensorFlow","severity":"MEDIUM","score":5.9,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00478,"kevAdded":null},{"id":"CVE-2022-36011","published":"2022-09-16T22:30:21.000Z","updated":"2025-04-23T16:59:29.191Z","title":"Null dereference on MLIR on empty function attributes in TensorFlow","severity":"MEDIUM","score":5.9,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00478,"kevAdded":null},{"id":"CVE-2022-36013","published":"2022-09-16T22:30:14.000Z","updated":"2025-04-23T16:59:35.082Z","title":"Null-dereference in `mlir::tfg::GraphDefImporter::ConvertNodeDef` in TensorFlow","severity":"MEDIUM","score":5.9,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00701,"kevAdded":null},{"id":"CVE-2022-35994","published":"2022-09-16T22:20:31.000Z","updated":"2025-04-23T16:59:41.356Z","title":"`CHECK` fail in `CollectiveGather` in TensorFlow","severity":"MEDIUM","score":5.9,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00478,"kevAdded":null},{"id":"CVE-2022-35993","published":"2022-09-16T22:20:25.000Z","updated":"2025-04-23T16:59:47.807Z","title":"`CHECK` fail in `SetSize` in TensorFlow","severity":"MEDIUM","score":5.9,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00478,"kevAdded":null},{"id":"CVE-2022-35992","published":"2022-09-16T22:20:21.000Z","updated":"2025-04-23T16:59:53.884Z","title":"`CHECK` fail in `TensorListFromTensor` in TensorFlow","severity":"MEDIUM","score":5.9,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00478,"kevAdded":null},{"id":"CVE-2022-35991","published":"2022-09-16T22:20:16.000Z","updated":"2025-04-23T16:59:59.552Z","title":"`CHECK` fail in `TensorListScatter` and `TensorListScatterV2` in TensorFlow","severity":"MEDIUM","score":5.9,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00531,"kevAdded":null},{"id":"CVE-2022-35999","published":"2022-09-16T22:15:28.000Z","updated":"2025-04-23T17:00:08.848Z","title":"`CHECK` fail in `Conv2DBackpropInput` in TensorFlow","severity":"MEDIUM","score":5.9,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00478,"kevAdded":null},{"id":"CVE-2022-35998","published":"2022-09-16T22:15:23.000Z","updated":"2025-04-23T17:00:15.815Z","title":"`CHECK` fail in `EmptyTensorList` in TensorFlow","severity":"MEDIUM","score":5.9,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00488,"kevAdded":null},{"id":"CVE-2022-35997","published":"2022-09-16T22:15:18.000Z","updated":"2025-04-23T17:00:21.604Z","title":"`CHECK` fail in `tf.sparse.cross` in TensorFlow","severity":"MEDIUM","score":5.9,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00488,"kevAdded":null},{"id":"CVE-2022-35995","published":"2022-09-16T22:15:12.000Z","updated":"2025-04-23T17:00:27.650Z","title":"`CHECK` fail in `AudioSummaryV2` in TensorFlow","severity":"MEDIUM","score":5.9,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00478,"kevAdded":null},{"id":"CVE-2022-36016","published":"2022-09-16T22:10:36.000Z","updated":"2025-04-23T17:00:33.911Z","title":"`CHECK`-fail in `tensorflow::full_type::SubstituteFromAttrs` in TensorFlow","severity":"MEDIUM","score":5.9,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00701,"kevAdded":null},{"id":"CVE-2022-36005","published":"2022-09-16T22:10:31.000Z","updated":"2025-04-23T17:00:39.728Z","title":"`CHECK` fail in `FakeQuantWithMinMaxVarsGradient` in TensorFlow","severity":"MEDIUM","score":5.9,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00478,"kevAdded":null},{"id":"CVE-2022-36004","published":"2022-09-16T22:10:26.000Z","updated":"2025-04-23T17:00:45.804Z","title":"`CHECK` fail in `tf.random.gamma` in TensorFlow","severity":"MEDIUM","score":5.9,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00488,"kevAdded":null},{"id":"CVE-2022-36003","published":"2022-09-16T22:10:21.000Z","updated":"2025-04-23T17:00:52.567Z","title":"`CHECK` fail in `RandomPoissonV2` in TensorFlow","severity":"MEDIUM","score":5.9,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00478,"kevAdded":null},{"id":"CVE-2022-36002","published":"2022-09-16T22:10:15.000Z","updated":"2025-04-23T17:00:58.965Z","title":"`CHECK` fail in `Unbatch` in TensorFlow","severity":"MEDIUM","score":5.9,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00478,"kevAdded":null},{"id":"CVE-2022-36001","published":"2022-09-16T22:10:10.000Z","updated":"2025-04-23T17:01:05.199Z","title":"`CHECK` fail in `DrawBoundingBoxes` in TensorFlow","severity":"MEDIUM","score":5.9,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00478,"kevAdded":null},{"id":"CVE-2022-36026","published":"2022-09-16T22:05:20.000Z","updated":"2025-04-23T17:01:11.089Z","title":"`CHECK` fail in `QuantizeAndDequantizeV3` in TensorFlow","severity":"MEDIUM","score":5.9,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00478,"kevAdded":null},{"id":"CVE-2022-36018","published":"2022-09-16T22:05:15.000Z","updated":"2025-04-23T17:01:17.051Z","title":"`CHECK` fail in `RaggedTensorToVariant` in TensorFlow","severity":"MEDIUM","score":5.9,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00462,"kevAdded":null},{"id":"CVE-2022-36019","published":"2022-09-16T22:05:10.000Z","updated":"2025-04-23T17:01:22.483Z","title":"`CHECK` fail in `FakeQuantWithMinMaxVarsPerChannel` in TensorFlow","severity":"MEDIUM","score":5.9,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00478,"kevAdded":null},{"id":"CVE-2022-35990","published":"2022-09-16T22:00:12.000Z","updated":"2025-04-23T17:01:29.664Z","title":"`CHECK` fail in `FakeQuantWithMinMaxVarsPerChannelGradient` in TensorFlow","severity":"MEDIUM","score":5.9,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00462,"kevAdded":null},{"id":"CVE-2022-35986","published":"2022-09-16T21:45:13.000Z","updated":"2025-04-23T17:01:35.348Z","title":"Segfault in `RaggedBincount` in TensorFlow","severity":"MEDIUM","score":5.9,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.0051,"kevAdded":null},{"id":"CVE-2022-35987","published":"2022-09-16T21:40:24.000Z","updated":"2025-04-23T17:01:40.899Z","title":"`CHECK` fail in `DenseBincount` in TensorFlow","severity":"MEDIUM","score":5.9,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00478,"kevAdded":null},{"id":"CVE-2022-35985","published":"2022-09-16T21:40:20.000Z","updated":"2025-04-23T17:01:47.248Z","title":"`CHECK` fail in `LRNGrad` in TensorFlow","severity":"MEDIUM","score":5.9,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00478,"kevAdded":null},{"id":"CVE-2022-35984","published":"2022-09-16T21:40:14.000Z","updated":"2025-04-23T17:01:53.304Z","title":"`CHECK` fail in `ParameterizedTruncatedNormal` in TensorFlow","severity":"MEDIUM","score":5.9,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00478,"kevAdded":null},{"id":"CVE-2022-35983","published":"2022-09-16T21:40:10.000Z","updated":"2025-04-23T17:01:59.888Z","title":"`CHECK` fail in `Save` and `SaveSlices` in TensorFlow","severity":"MEDIUM","score":5.9,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00478,"kevAdded":null},{"id":"CVE-2022-35989","published":"2022-09-16T21:35:15.000Z","updated":"2025-04-23T17:02:06.652Z","title":"`CHECK` fail in `MaxPool` in TensorFlow","severity":"MEDIUM","score":5.9,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00478,"kevAdded":null},{"id":"CVE-2022-35988","published":"2022-09-16T21:35:10.000Z","updated":"2025-04-23T17:02:13.410Z","title":"`CHECK` fail in `tf.linalg.matrix_rank` in TensorFlow","severity":"MEDIUM","score":5.9,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00488,"kevAdded":null},{"id":"CVE-2022-35982","published":"2022-09-16T21:30:13.000Z","updated":"2025-04-23T17:02:19.278Z","title":"Segfault in `SparseBincount` in TensorFlow","severity":"MEDIUM","score":5.9,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.0051,"kevAdded":null},{"id":"CVE-2022-35981","published":"2022-09-16T21:15:12.000Z","updated":"2025-04-23T17:02:24.602Z","title":"`CHECK` fail in `FractionalMaxPoolGrad` in TensorFlow","severity":"MEDIUM","score":5.9,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00478,"kevAdded":null},{"id":"CVE-2022-35979","published":"2022-09-16T21:10:10.000Z","updated":"2025-04-23T17:02:30.147Z","title":"Segfault in `QuantizedRelu` and `QuantizedRelu6`","severity":"MEDIUM","score":5.9,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.0051,"kevAdded":null},{"id":"CVE-2022-35974","published":"2022-09-16T21:05:12.000Z","updated":"2025-04-23T17:02:36.673Z","title":"Segfault in `QuantizeDownAndShrinkRange` in TensorFlow","severity":"MEDIUM","score":5.9,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.0051,"kevAdded":null},{"id":"CVE-2022-35972","published":"2022-09-16T21:00:19.000Z","updated":"2025-04-23T17:02:43.405Z","title":"Segfault in `QuantizedBiasAdd` in TensorFlow","severity":"MEDIUM","score":5.9,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00493,"kevAdded":null},{"id":"CVE-2022-35973","published":"2022-09-16T21:00:14.000Z","updated":"2025-04-23T17:02:49.153Z","title":"Segfault in `QuantizedMatMul` in TensorFlow","severity":"MEDIUM","score":5.9,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.0051,"kevAdded":null},{"id":"CVE-2022-35971","published":"2022-09-16T20:50:10.000Z","updated":"2025-04-23T17:02:54.713Z","title":"`CHECK` fail in `FakeQuantWithMinMaxVars` in TensorFlow","severity":"MEDIUM","score":5.9,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00462,"kevAdded":null},{"id":"CVE-2022-35969","published":"2022-09-16T20:45:19.000Z","updated":"2025-04-23T17:03:00.458Z","title":"`CHECK` fail in `Conv2DBackpropInput` in TensorFlow","severity":"MEDIUM","score":5.9,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00462,"kevAdded":null},{"id":"CVE-2022-35970","published":"2022-09-16T20:45:13.000Z","updated":"2025-04-23T17:03:06.335Z","title":"Segfault in `QuantizedInstanceNorm` in TensorFlow","severity":"MEDIUM","score":5.9,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.0051,"kevAdded":null},{"id":"CVE-2022-35968","published":"2022-09-16T20:40:10.000Z","updated":"2025-04-23T17:03:12.399Z","title":"`CHECK` fail in `AvgPoolGrad` in TensorFlow","severity":"MEDIUM","score":5.9,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00478,"kevAdded":null},{"id":"CVE-2022-35966","published":"2022-09-16T20:35:15.000Z","updated":"2025-04-23T17:03:18.137Z","title":"Segfault in `QuantizedAvgPool` in TensorFlow","severity":"MEDIUM","score":5.9,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00493,"kevAdded":null},{"id":"CVE-2022-35967","published":"2022-09-16T20:35:10.000Z","updated":"2025-04-23T17:03:24.192Z","title":"Segfault in `QuantizedAdd` in TensorFlow","severity":"MEDIUM","score":5.9,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00493,"kevAdded":null},{"id":"CVE-2022-35964","published":"2022-09-16T20:25:14.000Z","updated":"2025-04-23T17:03:30.144Z","title":"Segfault in `BlockLSTMGradV2` in TensorFlow","severity":"MEDIUM","score":5.9,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00493,"kevAdded":null},{"id":"CVE-2022-35965","published":"2022-09-16T20:25:09.000Z","updated":"2025-04-23T17:03:35.785Z","title":"Segfault in `LowerBound` and `UpperBound` in TensorFlow","severity":"MEDIUM","score":5.9,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00462,"kevAdded":null},{"id":"CVE-2022-35963","published":"2022-09-16T20:10:10.000Z","updated":"2025-04-23T17:03:41.735Z","title":"`CHECK` failures in `FractionalAvgPoolGrad` in TensorFlow","severity":"MEDIUM","score":5.9,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00478,"kevAdded":null},{"id":"CVE-2022-35960","published":"2022-09-16T20:00:15.000Z","updated":"2025-04-23T17:03:48.088Z","title":"`CHECK` failure in `TensorListReserve` in TensorFlow","severity":"MEDIUM","score":5.9,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00701,"kevAdded":null},{"id":"CVE-2022-35959","published":"2022-09-16T19:55:11.000Z","updated":"2025-04-23T17:03:53.520Z","title":"`CHECK` failures in `AvgPool3DGrad` in TensorFlow","severity":"MEDIUM","score":5.9,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00462,"kevAdded":null},{"id":"CVE-2022-35952","published":"2022-09-16T19:50:10.000Z","updated":"2025-04-23T17:03:58.894Z","title":"`CHECK` failures in `UnbatchGradOp` in TensorFlow","severity":"MEDIUM","score":5.9,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00716,"kevAdded":null},{"id":"CVE-2022-35940","published":"2022-09-16T19:45:20.000Z","updated":"2025-04-23T17:04:04.792Z","title":"Int overflow in `RaggedRangeOp` in Tensoflow","severity":"MEDIUM","score":5.9,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00701,"kevAdded":null},{"id":"CVE-2022-35941","published":"2022-09-16T19:45:14.000Z","updated":"2025-04-23T17:04:10.779Z","title":"`CHECK` failure in `AvgPoolOp` in Tensorflow","severity":"MEDIUM","score":5.9,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00721,"kevAdded":null},{"id":"CVE-2022-35937","published":"2022-09-16T19:40:20.000Z","updated":"2025-04-23T17:04:16.104Z","title":"OOB read in `Gather_nd` op in TensorFlow Lite","severity":"HIGH","score":7,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00566,"kevAdded":null},{"id":"CVE-2022-35939","published":"2022-09-16T19:40:11.000Z","updated":"2025-04-23T17:04:22.614Z","title":"Out of bounds write in `scatter_nd` op in TensorFlow Lite","severity":"HIGH","score":7,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00566,"kevAdded":null},{"id":"CVE-2022-35935","published":"2022-09-16T19:35:15.000Z","updated":"2025-04-23T17:04:30.631Z","title":"`CHECK` failure in `SobolSample` via missing validation in TensorFlow","severity":"MEDIUM","score":5.9,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00531,"kevAdded":null},{"id":"CVE-2022-35938","published":"2022-09-16T19:35:10.000Z","updated":"2025-04-23T17:04:38.377Z","title":"OOB read in `Gather_nd` op in TensorFlow Lite Micro","severity":"HIGH","score":7,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00569,"kevAdded":null},{"id":"CVE-2022-35934","published":"2022-09-16T19:30:13.000Z","updated":"2025-04-23T17:04:46.468Z","title":"`CHECK` failure in tf.reshape in Tensorflow","severity":"MEDIUM","score":5.9,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00478,"kevAdded":null},{"id":"CVE-2022-29216","published":"2022-05-20T23:35:13.000Z","updated":"2025-04-22T17:56:38.650Z","title":"Code injection in `saved_model_cli` in TensorFlow","severity":"HIGH","score":7.8,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00549,"kevAdded":null},{"id":"CVE-2022-29213","published":"2022-05-20T23:30:15.000Z","updated":"2025-04-22T17:56:54.042Z","title":"Incomplete validation in signal ops leads to crashes in TensorFlow","severity":"MEDIUM","score":5.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00318,"kevAdded":null},{"id":"CVE-2022-29210","published":"2022-05-20T23:25:21.000Z","updated":"2025-04-23T18:23:44.004Z","title":"Heap buffer overflow due to incorrect hash function in TensorFlow","severity":"MEDIUM","score":5.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.0023,"kevAdded":null},{"id":"CVE-2022-29209","published":"2022-05-20T23:25:14.000Z","updated":"2025-04-22T17:57:07.814Z","title":"Type confusion leading to `CHECK`-failure based denial of service in TensorFlow","severity":"MEDIUM","score":5.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00395,"kevAdded":null},{"id":"CVE-2022-29211","published":"2022-05-20T23:20:15.000Z","updated":"2025-04-22T17:57:17.184Z","title":"Segfault in TensorFlow if `tf.histogram_fixed_width` is called with NaN values","severity":"MEDIUM","score":5.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00321,"kevAdded":null},{"id":"CVE-2022-29212","published":"2022-05-20T23:15:15.000Z","updated":"2025-04-22T17:57:26.021Z","title":"Core dump when loading TFLite models with quantization in TensorFlow","severity":"MEDIUM","score":5.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00324,"kevAdded":null},{"id":"CVE-2022-29201","published":"2022-05-20T23:00:15.000Z","updated":"2025-04-22T17:57:35.065Z","title":"Missing validation in `QuantizedConv2D` results in undefined behavior in TensorFlow","severity":"MEDIUM","score":5.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00341,"kevAdded":null},{"id":"CVE-2022-29202","published":"2022-05-20T22:55:13.000Z","updated":"2025-04-22T17:57:48.764Z","title":"Denial of service in TensorFlow due to lack of validation in `tf.ragged.constant`","severity":"MEDIUM","score":5.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00324,"kevAdded":null},{"id":"CVE-2022-29203","published":"2022-05-20T22:50:11.000Z","updated":"2025-04-22T17:58:03.254Z","title":"Integer overflow in `SpaceToBatchND` in TensorFlow","severity":"MEDIUM","score":5.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00341,"kevAdded":null},{"id":"CVE-2022-29204","published":"2022-05-20T22:40:13.000Z","updated":"2025-04-22T17:58:11.932Z","title":"Missing validation causes denial of service in TensorFlow via `Conv3DBackpropFilterV2`","severity":"MEDIUM","score":5.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00354,"kevAdded":null},{"id":"CVE-2022-29208","published":"2022-05-20T22:30:13.000Z","updated":"2025-04-22T17:58:20.112Z","title":"Segfault and Out-of-bounds Write write due to incomplete validation in TensorFlow","severity":"HIGH","score":7.1,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00387,"kevAdded":null},{"id":"CVE-2022-29205","published":"2022-05-20T22:25:14.000Z","updated":"2025-04-22T17:58:30.888Z","title":"Segfault due to missing support for quantized types in TensorFlow","severity":"MEDIUM","score":5.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00325,"kevAdded":null},{"id":"CVE-2022-29206","published":"2022-05-20T22:15:13.000Z","updated":"2025-04-22T17:58:39.550Z","title":"Missing validation results in undefined behavior in `SparseTensorDenseAdd` in TensorFlow","severity":"MEDIUM","score":5.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00364,"kevAdded":null},{"id":"CVE-2022-29207","published":"2022-05-20T22:10:12.000Z","updated":"2025-04-22T17:58:48.272Z","title":"Undefined behavior when users supply invalid resource handles in TensorFlow","severity":"MEDIUM","score":5.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00325,"kevAdded":null},{"id":"CVE-2022-29195","published":"2022-05-20T22:00:15.000Z","updated":"2025-04-22T17:58:58.035Z","title":"Missing validation causes denial of service in TensorFlow via `StagePeek`","severity":"MEDIUM","score":5.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00325,"kevAdded":null},{"id":"CVE-2022-29197","published":"2022-05-20T21:55:18.000Z","updated":"2025-04-22T17:59:07.613Z","title":"Missing validation causes denial of service in TensorFlow via `UnsortedSegmentJoin`","severity":"MEDIUM","score":5.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00325,"kevAdded":null},{"id":"CVE-2022-29196","published":"2022-05-20T21:55:12.000Z","updated":"2025-04-22T17:59:18.399Z","title":"Missing validation causes denial of service in TensorFlow via `Conv3DBackpropFilterV2`","severity":"MEDIUM","score":5.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00325,"kevAdded":null},{"id":"CVE-2022-29198","published":"2022-05-20T21:50:12.000Z","updated":"2025-04-22T17:59:29.034Z","title":"Missing validation causes denial of service in TensorFlow via `SparseTensorToCSRSparseMatrix`","severity":"MEDIUM","score":5.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00325,"kevAdded":null},{"id":"CVE-2022-29199","published":"2022-05-20T21:40:12.000Z","updated":"2025-04-22T17:59:37.834Z","title":"Missing validation causes denial of service in TensorFlow via `LoadAndRemapMatrix`","severity":"MEDIUM","score":5.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00325,"kevAdded":null},{"id":"CVE-2022-29200","published":"2022-05-20T21:30:14.000Z","updated":"2025-04-22T17:59:47.129Z","title":"Missing validation causes denial of service in TensorFlow via `LSTMBlockCell`","severity":"MEDIUM","score":5.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00325,"kevAdded":null},{"id":"CVE-2022-29193","published":"2022-05-20T21:20:14.000Z","updated":"2025-04-22T17:59:57.988Z","title":"Missing validation causes `TensorSummaryV2` in TensorFlow to crash","severity":"MEDIUM","score":5.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00325,"kevAdded":null},{"id":"CVE-2022-29194","published":"2022-05-20T21:10:12.000Z","updated":"2025-04-22T18:00:13.737Z","title":"Missing validation causes denial of service via `DeleteSessionTensor` in TensorFlow","severity":"MEDIUM","score":5.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00333,"kevAdded":null},{"id":"CVE-2022-29191","published":"2022-05-20T20:50:11.000Z","updated":"2025-04-22T18:00:23.414Z","title":"Missing validation causes denial of service via `GetSessionTensor` in TensorFlow","severity":"MEDIUM","score":5.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00359,"kevAdded":null},{"id":"CVE-2022-29192","published":"2022-05-20T20:30:14.000Z","updated":"2025-04-22T18:00:33.691Z","title":"Missing validation crashes `QuantizeAndDequantizeV4Grad` in TensorFlow","severity":"MEDIUM","score":5.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00349,"kevAdded":null},{"id":"CVE-2022-23561","published":"2022-02-04T22:32:46.000Z","updated":"2025-04-23T19:07:29.089Z","title":"Out of bounds write in TFLite","severity":"HIGH","score":8.8,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00544,"kevAdded":null},{"id":"CVE-2022-23557","published":"2022-02-04T22:32:44.000Z","updated":"2025-04-22T18:22:50.565Z","title":"Division by zero in TFLite","severity":"MEDIUM","score":6.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00763,"kevAdded":null},{"id":"CVE-2022-23558","published":"2022-02-04T22:32:43.000Z","updated":"2025-04-22T18:23:00.833Z","title":"Integer overflow in TFLite array creation","severity":"HIGH","score":7.6,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00818,"kevAdded":null},{"id":"CVE-2022-23570","published":"2022-02-04T22:32:42.000Z","updated":"2025-04-22T18:23:10.226Z","title":"Null-dereference in Tensorflow","severity":"MEDIUM","score":6.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.01,"kevAdded":null},{"id":"CVE-2022-23564","published":"2022-02-04T22:32:41.000Z","updated":"2025-04-23T19:07:35.115Z","title":"Reachable Assertion in Tensorflow","severity":"MEDIUM","score":6.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00469,"kevAdded":null},{"id":"CVE-2022-23565","published":"2022-02-04T22:32:40.000Z","updated":"2025-04-23T19:07:40.724Z","title":"`CHECK`-failures in Tensorflow","severity":"MEDIUM","score":6.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00473,"kevAdded":null},{"id":"CVE-2022-23562","published":"2022-02-04T22:32:39.000Z","updated":"2025-04-23T19:07:46.214Z","title":"Integer overflow in Tensorflow","severity":"HIGH","score":7.6,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00583,"kevAdded":null},{"id":"CVE-2022-23563","published":"2022-02-04T22:32:38.000Z","updated":"2025-04-23T19:07:51.891Z","title":"Insecure temporary file in Tensorflow","severity":"HIGH","score":7.1,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.0011,"kevAdded":null},{"id":"CVE-2022-23559","published":"2022-02-04T22:32:37.000Z","updated":"2025-04-22T18:23:20.273Z","title":"Integer overflow in TFLite","severity":"HIGH","score":8.8,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.01183,"kevAdded":null},{"id":"CVE-2022-23560","published":"2022-02-04T22:32:36.000Z","updated":"2025-04-22T18:23:30.365Z","title":"Read and Write outside of bounds in TFLite","severity":"HIGH","score":8.8,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00844,"kevAdded":null},{"id":"CVE-2022-23574","published":"2022-02-04T22:32:35.000Z","updated":"2025-04-22T18:23:39.476Z","title":"Out of bounds read and write in Tensorflow","severity":"HIGH","score":8.8,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00844,"kevAdded":null},{"id":"CVE-2022-23571","published":"2022-02-04T22:32:34.000Z","updated":"2025-04-23T19:07:57.657Z","title":"Reachable Assertion in Tensorflow","severity":"MEDIUM","score":6.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00473,"kevAdded":null},{"id":"CVE-2022-23566","published":"2022-02-04T22:32:33.000Z","updated":"2025-04-22T18:23:48.670Z","title":"Out of bounds write in Tensorflow","severity":"HIGH","score":8.8,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00932,"kevAdded":null},{"id":"CVE-2022-23577","published":"2022-02-04T22:32:31.000Z","updated":"2025-04-22T18:23:59.696Z","title":"Null-dereference in Tensorflow","severity":"MEDIUM","score":6.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00789,"kevAdded":null},{"id":"CVE-2022-23578","published":"2022-02-04T22:32:30.000Z","updated":"2025-04-22T18:24:09.382Z","title":"Memory leak in Tensorflow","severity":"MEDIUM","score":4.3,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00722,"kevAdded":null},{"id":"CVE-2022-23572","published":"2022-02-04T22:32:29.000Z","updated":"2025-04-22T18:24:19.179Z","title":"Crash when type cannot be specialized in Tensorflow","severity":"MEDIUM","score":6.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.01,"kevAdded":null},{"id":"CVE-2022-23573","published":"2022-02-04T22:32:28.000Z","updated":"2025-04-22T18:24:28.177Z","title":"Uninitialized variable access in Tensorflow","severity":"HIGH","score":7.6,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00761,"kevAdded":null},{"id":"CVE-2022-23585","published":"2022-02-04T22:32:27.000Z","updated":"2025-04-22T18:24:37.595Z","title":"Memory leak in decoding PNG images in Tensorflow","severity":"MEDIUM","score":4.3,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.01,"kevAdded":null},{"id":"CVE-2022-23579","published":"2022-02-04T22:32:26.000Z","updated":"2025-04-22T18:24:47.549Z","title":"`CHECK`-failures during Grappler's `SafeToRemoveIdentity` in Tensorflow","severity":"MEDIUM","score":6.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00828,"kevAdded":null},{"id":"CVE-2022-23580","published":"2022-02-04T22:32:25.000Z","updated":"2025-04-22T18:24:56.530Z","title":"Abort caused by allocating a vector that is too large in Tensorflow","severity":"MEDIUM","score":6.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00828,"kevAdded":null},{"id":"CVE-2022-23581","published":"2022-02-04T22:32:24.000Z","updated":"2025-04-22T18:25:07.180Z","title":"`CHECK`-failures during Grappler's `IsSimplifiableReshape` in Tensorflow","severity":"MEDIUM","score":6.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.0116,"kevAdded":null},{"id":"CVE-2022-23575","published":"2022-02-04T22:32:23.000Z","updated":"2025-04-22T18:25:16.716Z","title":"Integer overflow in Tensorflow","severity":"MEDIUM","score":6.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00789,"kevAdded":null},{"id":"CVE-2022-23576","published":"2022-02-04T22:32:22.000Z","updated":"2025-04-22T18:25:25.949Z","title":"Integer overflow in Tensorflow","severity":"MEDIUM","score":6.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00783,"kevAdded":null},{"id":"CVE-2022-23588","published":"2022-02-04T22:32:21.000Z","updated":"2025-04-22T18:25:35.309Z","title":"`CHECK`-fails due to attempting to build a reference tensor in Tensorflow","severity":"MEDIUM","score":6.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00872,"kevAdded":null},{"id":"CVE-2022-23589","published":"2022-02-04T22:32:20.000Z","updated":"2025-04-22T18:25:46.642Z","title":"Null pointer dereference in Grappler's `IsConstant` in Tensorflow","severity":"MEDIUM","score":6.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.01106,"kevAdded":null},{"id":"CVE-2022-23586","published":"2022-02-04T22:32:19.000Z","updated":"2025-04-22T18:25:56.888Z","title":"Multiple `CHECK`-fails in `function.cc` in Tensorflow","severity":"MEDIUM","score":6.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00807,"kevAdded":null},{"id":"CVE-2022-23583","published":"2022-02-04T22:32:18.000Z","updated":"2025-04-22T18:26:06.914Z","title":"`CHECK`-failures in binary ops in Tensorflow","severity":"MEDIUM","score":6.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00879,"kevAdded":null},{"id":"CVE-2022-23582","published":"2022-02-04T22:32:17.000Z","updated":"2025-04-22T18:26:15.917Z","title":"`CHECK`-failures in `TensorByteSize` in Tensorflow","severity":"MEDIUM","score":6.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00789,"kevAdded":null},{"id":"CVE-2022-23584","published":"2022-02-04T22:32:16.000Z","updated":"2025-04-22T18:26:25.572Z","title":"Use after free in `DecodePng` in Tensorflow","severity":"HIGH","score":7.6,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00731,"kevAdded":null},{"id":"CVE-2022-23592","published":"2022-02-04T22:32:14.000Z","updated":"2025-04-22T18:26:35.238Z","title":"Out of bounds read in Tensorflow","severity":"HIGH","score":8.1,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00865,"kevAdded":null},{"id":"CVE-2022-23587","published":"2022-02-04T22:32:14.000Z","updated":"2025-04-22T18:26:44.601Z","title":"Integer overflow in Tensorflow","severity":"HIGH","score":8.8,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00896,"kevAdded":null},{"id":"CVE-2022-23595","published":"2022-02-04T22:32:13.000Z","updated":"2025-04-22T18:26:53.489Z","title":"Null pointer dereference in TensorFlow","severity":"MEDIUM","score":5.3,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00781,"kevAdded":null},{"id":"CVE-2022-23594","published":"2022-02-04T22:32:11.000Z","updated":"2025-04-23T19:08:04.448Z","title":"Out of bounds read in Tensorflow","severity":"HIGH","score":8.8,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00144,"kevAdded":null},{"id":"CVE-2022-23590","published":"2022-02-04T22:32:10.000Z","updated":"2025-04-22T18:27:03.523Z","title":"Crash due to erroneous `StatusOr` in Tensorflow","severity":"MEDIUM","score":5.9,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00981,"kevAdded":null},{"id":"CVE-2022-23591","published":"2022-02-04T22:32:09.000Z","updated":"2025-04-23T19:08:10.411Z","title":"Stack overflow in Tensorflow","severity":"HIGH","score":7.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00795,"kevAdded":null},{"id":"CVE-2022-23593","published":"2022-02-04T22:32:08.000Z","updated":"2025-04-22T18:27:13.457Z","title":"Segfault in `simplifyBroadcast` in Tensorflow","severity":"MEDIUM","score":5.9,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.0087,"kevAdded":null},{"id":"CVE-2021-41227","published":"2021-11-05T22:30:23.000Z","updated":"2024-08-04T03:08:31.590Z","title":"Arbitrary memory read in `ImmutableConst`","severity":"MEDIUM","score":6.6,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00238,"kevAdded":null},{"id":"CVE-2021-41225","published":"2021-11-05T22:30:17.000Z","updated":"2024-08-04T03:08:31.609Z","title":"A use of uninitialized value vulnerability in Tensorflow","severity":"MEDIUM","score":5.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00196,"kevAdded":null},{"id":"CVE-2021-41222","published":"2021-11-05T22:30:11.000Z","updated":"2024-08-04T03:08:31.547Z","title":"Segfault due to negative splits in `SplitV`","severity":"MEDIUM","score":5.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00187,"kevAdded":null},{"id":"CVE-2021-41228","published":"2021-11-05T22:25:11.000Z","updated":"2024-08-04T03:08:31.343Z","title":"Code injection in `saved_model_cli`","severity":"HIGH","score":7.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00217,"kevAdded":null},{"id":"CVE-2021-41220","published":"2021-11-05T22:20:12.000Z","updated":"2024-08-04T03:08:31.404Z","title":"Use after free in `CollectiveReduceV2`","severity":"HIGH","score":7.8,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00211,"kevAdded":null},{"id":"CVE-2021-41221","published":"2021-11-05T22:15:11.000Z","updated":"2024-08-04T03:08:31.404Z","title":"Access to invalid memory during shape inference in `Cudnn*` ops","severity":"HIGH","score":7.8,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00221,"kevAdded":null},{"id":"CVE-2021-41216","published":"2021-11-05T22:10:17.000Z","updated":"2024-08-04T03:08:31.489Z","title":"Heap buffer overflow in `Transpose`","severity":"MEDIUM","score":5.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00161,"kevAdded":null},{"id":"CVE-2021-41213","published":"2021-11-05T22:10:11.000Z","updated":"2024-08-04T03:08:31.502Z","title":"Deadlock in mutually recursive `tf.function` objects","severity":"MEDIUM","score":5.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00243,"kevAdded":null},{"id":"CVE-2021-41218","published":"2021-11-05T22:05:20.000Z","updated":"2024-08-04T03:08:31.519Z","title":"Integer division by 0 in `tf.raw_ops.AllToAll`","severity":"MEDIUM","score":5.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00133,"kevAdded":null},{"id":"CVE-2021-41206","published":"2021-11-05T22:05:14.000Z","updated":"2024-08-04T03:08:31.625Z","title":"Incomplete validation of shapes in multiple TF ops","severity":"HIGH","score":7,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.0018,"kevAdded":null},{"id":"CVE-2021-41208","published":"2021-11-05T21:50:16.000Z","updated":"2024-08-04T03:08:31.577Z","title":"Incomplete validation in boosted trees code","severity":"HIGH","score":8.8,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00173,"kevAdded":null},{"id":"CVE-2021-41207","published":"2021-11-05T21:50:10.000Z","updated":"2024-08-04T03:08:31.386Z","title":"Division by zero in `ParallelConcat`","severity":"MEDIUM","score":5.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00141,"kevAdded":null},{"id":"CVE-2021-41202","published":"2021-11-05T21:45:18.000Z","updated":"2024-08-04T03:08:31.442Z","title":"Overflow/crash in `tf.range`","severity":"MEDIUM","score":5.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00209,"kevAdded":null},{"id":"CVE-2021-41209","published":"2021-11-05T21:45:11.000Z","updated":"2024-08-04T03:08:31.441Z","title":"FPE in convolutions with zero size filters","severity":"MEDIUM","score":5.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00141,"kevAdded":null},{"id":"CVE-2021-41203","published":"2021-11-05T21:05:13.000Z","updated":"2024-08-04T03:08:31.436Z","title":"Missing validation during checkpoint loading","severity":"HIGH","score":7.8,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00189,"kevAdded":null},{"id":"CVE-2021-41215","published":"2021-11-05T20:55:16.000Z","updated":"2024-08-04T03:08:31.507Z","title":"Null pointer exception in `DeserializeSparse`","severity":"MEDIUM","score":5.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00187,"kevAdded":null},{"id":"CVE-2021-41217","published":"2021-11-05T20:55:10.000Z","updated":"2024-08-04T03:08:31.448Z","title":"Null pointer exception when `Exit` node is not preceded by `Enter` op","severity":"MEDIUM","score":5.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00187,"kevAdded":null},{"id":"CVE-2021-41219","published":"2021-11-05T20:50:17.000Z","updated":"2024-08-04T03:08:31.583Z","title":"Undefined behavior via `nullptr` reference binding in sparse matrix multiplication","severity":"HIGH","score":7.8,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00211,"kevAdded":null},{"id":"CVE-2021-41214","published":"2021-11-05T20:50:11.000Z","updated":"2024-08-04T03:08:31.367Z","title":"Reference binding to `nullptr` in `tf.ragged.cross`","severity":"HIGH","score":7.8,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00217,"kevAdded":null},{"id":"CVE-2021-41204","published":"2021-11-05T20:45:10.000Z","updated":"2024-08-04T03:08:31.488Z","title":"Segfault while copying constant resource tensor","severity":"MEDIUM","score":5.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00141,"kevAdded":null},{"id":"CVE-2021-41226","published":"2021-11-05T20:20:22.000Z","updated":"2024-08-04T03:08:31.504Z","title":"Heap OOB read in `SparseBinCount`","severity":"HIGH","score":7.1,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00208,"kevAdded":null},{"id":"CVE-2021-41223","published":"2021-11-05T20:20:16.000Z","updated":"2024-08-04T03:08:31.474Z","title":"Heap OOB read in `FusedBatchNorm` kernels","severity":"HIGH","score":7.1,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00208,"kevAdded":null},{"id":"CVE-2021-41224","published":"2021-11-05T20:20:11.000Z","updated":"2024-08-04T03:08:31.580Z","title":"`SparseFillEmptyRows` heap OOB read","severity":"HIGH","score":7.1,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00208,"kevAdded":null},{"id":"CVE-2021-41212","published":"2021-11-05T20:15:17.000Z","updated":"2024-08-04T03:08:31.357Z","title":"Heap OOB read in `tf.ragged.cross`","severity":"HIGH","score":7.1,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00208,"kevAdded":null},{"id":"CVE-2021-41211","published":"2021-11-05T20:15:11.000Z","updated":"2024-08-04T03:08:31.458Z","title":"Heap OOB read in shape inference for `QuantizeV2`","severity":"HIGH","score":7.1,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00208,"kevAdded":null},{"id":"CVE-2021-41205","published":"2021-11-05T20:10:16.000Z","updated":"2024-08-04T03:08:31.437Z","title":"Heap OOB read in all `tf.raw_ops.QuantizeAndDequantizeV*` ops","severity":"HIGH","score":7.1,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00153,"kevAdded":null},{"id":"CVE-2021-41210","published":"2021-11-05T20:10:10.000Z","updated":"2024-08-04T03:08:31.472Z","title":"Heap OOB read in `tf.raw_ops.SparseCountSparseOutput`","severity":"HIGH","score":7.1,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00153,"kevAdded":null},{"id":"CVE-2021-41201","published":"2021-11-05T20:05:12.000Z","updated":"2024-08-04T03:08:31.506Z","title":"Unitialized access in `EinsumHelper::ParseEquation`","severity":"HIGH","score":7.8,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00249,"kevAdded":null},{"id":"CVE-2021-41200","published":"2021-11-05T20:00:12.000Z","updated":"2024-11-13T21:44:45.830Z","title":"Incomplete validation in `tf.summary.create_file_writer`","severity":"MEDIUM","score":5.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00238,"kevAdded":null},{"id":"CVE-2021-41197","published":"2021-11-05T19:55:36.000Z","updated":"2024-08-04T03:08:31.502Z","title":"Crashes due to overflow and `CHECK`-fail in ops with large tensor shapes","severity":"MEDIUM","score":5.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00319,"kevAdded":null},{"id":"CVE-2021-41198","published":"2021-11-05T19:55:26.000Z","updated":"2024-08-04T03:08:31.248Z","title":"Overflow/crash in `tf.tile` when tiling tensor is large","severity":"MEDIUM","score":5.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00238,"kevAdded":null},{"id":"CVE-2021-41199","published":"2021-11-05T19:55:19.000Z","updated":"2024-08-04T03:08:31.400Z","title":"Overflow/crash in `tf.image.resize` when size is large","severity":"MEDIUM","score":5.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00238,"kevAdded":null},{"id":"CVE-2021-41196","published":"2021-11-05T19:55:13.000Z","updated":"2024-08-04T03:08:31.485Z","title":"Crash in `max_pool3d` when size argument is 0 or negative","severity":"MEDIUM","score":5.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00238,"kevAdded":null},{"id":"CVE-2021-41195","published":"2021-11-05T19:50:12.000Z","updated":"2024-08-04T03:08:31.297Z","title":"Crash in `tf.math.segment_*` operations","severity":"MEDIUM","score":5.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00212,"kevAdded":null},{"id":"CVE-2021-37690","published":"2021-08-12T23:10:16.000Z","updated":"2024-08-04T01:23:01.511Z","title":"Use after free and segfault in shape inference functions in TensorFlow","severity":"MEDIUM","score":6.6,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00163,"kevAdded":null},{"id":"CVE-2021-37678","published":"2021-08-12T23:05:10.000Z","updated":"2024-08-04T01:23:01.401Z","title":"Arbitrary code execution due to YAML deserialization","severity":"CRITICAL","score":9.3,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00447,"kevAdded":null},{"id":"CVE-2021-37692","published":"2021-08-12T23:00:14.000Z","updated":"2024-08-04T01:23:01.419Z","title":"Segfault on strings tensors with mistmatched dimensions in TensorFlow","severity":"MEDIUM","score":5.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00172,"kevAdded":null},{"id":"CVE-2021-37669","published":"2021-08-12T22:55:17.000Z","updated":"2024-08-04T01:23:01.462Z","title":"Crash in NMS ops caused by integer conversion to unsigned in TensorFlow","severity":"MEDIUM","score":5.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00175,"kevAdded":null},{"id":"CVE-2021-37673","published":"2021-08-12T22:55:11.000Z","updated":"2024-08-04T01:23:01.441Z","title":"`CHECK`-fail in `MapStage` in TensorFlow","severity":"MEDIUM","score":5.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00154,"kevAdded":null},{"id":"CVE-2021-37663","published":"2021-08-12T22:45:18.000Z","updated":"2024-08-04T01:23:01.403Z","title":"Incomplete validation in `QuantizeV2` in TensorFlow","severity":"HIGH","score":7.8,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00173,"kevAdded":null},{"id":"CVE-2021-37682","published":"2021-08-12T22:45:12.000Z","updated":"2024-08-04T01:23:01.529Z","title":"Use of unitialized value in TensorFlow Lite","severity":"MEDIUM","score":4.4,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.0018,"kevAdded":null},{"id":"CVE-2021-37674","published":"2021-08-12T22:40:19.000Z","updated":"2024-08-04T01:23:01.520Z","title":"Incomplete validation in `MaxPoolGrad` in TensorFlow","severity":"MEDIUM","score":5.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00179,"kevAdded":null},{"id":"CVE-2021-37665","published":"2021-08-12T22:40:12.000Z","updated":"2024-08-04T01:23:01.435Z","title":"Incomplete validation in MKL requantization in TensorFlow","severity":"HIGH","score":7.8,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00185,"kevAdded":null},{"id":"CVE-2021-37677","published":"2021-08-12T22:35:10.000Z","updated":"2024-08-04T01:23:01.450Z","title":"Missing validation in shape inference for `Dequantize` in TensorFlow","severity":"MEDIUM","score":5.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00148,"kevAdded":null},{"id":"CVE-2021-37683","published":"2021-08-12T22:30:23.000Z","updated":"2024-08-04T01:23:01.436Z","title":"Division by zero in TensorFlow Lite division operations","severity":"MEDIUM","score":5.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00154,"kevAdded":null},{"id":"CVE-2021-37684","published":"2021-08-12T22:30:17.000Z","updated":"2024-08-04T01:23:01.504Z","title":"Division by zero in TensorFlow Lite pooling operations","severity":"MEDIUM","score":5.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00138,"kevAdded":null},{"id":"CVE-2021-37668","published":"2021-08-12T22:30:12.000Z","updated":"2024-08-04T01:23:01.519Z","title":"Division by zero in TensorFlow Lite `tf.raw_ops.UnravelIndex`","severity":"MEDIUM","score":5.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00154,"kevAdded":null},{"id":"CVE-2021-37670","published":"2021-08-12T22:25:16.000Z","updated":"2024-08-04T01:23:01.507Z","title":"Heap OOB in `UpperBound` and `LowerBound` in TensorFlow","severity":"MEDIUM","score":5.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00169,"kevAdded":null},{"id":"CVE-2021-37691","published":"2021-08-12T22:25:11.000Z","updated":"2024-08-04T01:23:01.519Z","title":"Division by zero in LSH in TensorFlow Lite","severity":"MEDIUM","score":5.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00152,"kevAdded":null},{"id":"CVE-2021-37679","published":"2021-08-12T22:20:16.000Z","updated":"2024-08-04T01:23:01.507Z","title":"Heap OOB in nested `tf.map_fn` with `RaggedTensor`s in TensorFlow","severity":"HIGH","score":7.1,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00181,"kevAdded":null},{"id":"CVE-2021-37672","published":"2021-08-12T22:20:11.000Z","updated":"2024-08-04T01:23:01.434Z","title":"Heap OOB in `SdcaOptimizerV2` in TensorFlow","severity":"MEDIUM","score":5.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00172,"kevAdded":null},{"id":"CVE-2021-37687","published":"2021-08-12T22:15:17.000Z","updated":"2024-08-04T01:23:01.653Z","title":"Heap OOB in TensorFlow Lite's `Gather*` implementations","severity":"MEDIUM","score":5.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00191,"kevAdded":null},{"id":"CVE-2021-37685","published":"2021-08-12T22:15:10.000Z","updated":"2024-08-04T01:23:01.547Z","title":"Heap OOB in TensorFlow Lite","severity":"MEDIUM","score":5.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00172,"kevAdded":null},{"id":"CVE-2021-37681","published":"2021-08-12T22:00:24.000Z","updated":"2024-08-04T01:23:01.508Z","title":"Null pointer exception in TensorFlow Lite","severity":"HIGH","score":7.8,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00173,"kevAdded":null},{"id":"CVE-2021-37689","published":"2021-08-12T22:00:19.000Z","updated":"2024-08-04T01:23:01.451Z","title":"Null pointer dereference in TensorFlow Lite MLIR optimizations","severity":"HIGH","score":7.8,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00165,"kevAdded":null},{"id":"CVE-2021-37688","published":"2021-08-12T22:00:12.000Z","updated":"2024-08-04T01:23:01.508Z","title":"Null pointer dereference in TensorFlow Lite","severity":"HIGH","score":7.8,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00165,"kevAdded":null},{"id":"CVE-2021-37686","published":"2021-08-12T21:55:11.000Z","updated":"2024-11-13T21:20:48.849Z","title":"Infinite loop in TensorFlow Lite","severity":"MEDIUM","score":5.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00173,"kevAdded":null},{"id":"CVE-2021-37680","published":"2021-08-12T21:45:17.000Z","updated":"2024-08-04T01:23:01.555Z","title":"Division by zero in TFLite in TensorFlow","severity":"MEDIUM","score":5.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00152,"kevAdded":null},{"id":"CVE-2021-37675","published":"2021-08-12T21:45:11.000Z","updated":"2024-08-04T01:23:01.430Z","title":"Division by 0 in most convolution operators in TensorFlow","severity":"MEDIUM","score":5.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.0016,"kevAdded":null},{"id":"CVE-2021-37676","published":"2021-08-12T21:40:27.000Z","updated":"2024-08-04T01:23:01.528Z","title":"Reference binding to nullptr in shape inference in TensorFlow","severity":"HIGH","score":7.8,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00173,"kevAdded":null},{"id":"CVE-2021-37671","published":"2021-08-12T21:40:22.000Z","updated":"2024-08-04T01:23:01.520Z","title":"Reference binding to nullptr in map operations in TensorFlow","severity":"HIGH","score":7.8,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00173,"kevAdded":null},{"id":"CVE-2021-37666","published":"2021-08-12T21:40:16.000Z","updated":"2024-08-04T01:23:01.509Z","title":"Reference binding to nullptr in `RaggedTensorToVariant` in TensorFlow","severity":"HIGH","score":7.8,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00173,"kevAdded":null},{"id":"CVE-2021-37667","published":"2021-08-12T21:40:10.000Z","updated":"2024-08-04T01:23:01.485Z","title":"Reference binding to nullptr in unicode encoding in TensorFlow","severity":"HIGH","score":7.8,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00173,"kevAdded":null},{"id":"CVE-2021-37648","published":"2021-08-12T21:15:18.000Z","updated":"2024-08-04T01:23:01.284Z","title":"Incorrect validation of `SaveV2` inputs in TensorFlow","severity":"HIGH","score":7.8,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00186,"kevAdded":null},{"id":"CVE-2021-37652","published":"2021-08-12T21:15:12.000Z","updated":"2024-08-04T01:23:01.506Z","title":"Use after free in boosted trees creation in TensorFlow","severity":"HIGH","score":7.8,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00173,"kevAdded":null},{"id":"CVE-2021-37646","published":"2021-08-12T21:10:11.000Z","updated":"2024-08-04T01:23:01.254Z","title":"Bad alloc in `StringNGrams` caused by integer conversion in TensorFlow","severity":"MEDIUM","score":5.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00154,"kevAdded":null},{"id":"CVE-2021-37661","published":"2021-08-12T21:05:17.000Z","updated":"2024-08-04T01:23:01.463Z","title":"Crash caused by integer conversion to unsigned in TensorFlow","severity":"MEDIUM","score":5.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00154,"kevAdded":null},{"id":"CVE-2021-37645","published":"2021-08-12T21:05:11.000Z","updated":"2024-08-04T01:23:01.313Z","title":"Integer overflow due to conversion to unsigned in TensorFlow","severity":"MEDIUM","score":5.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00152,"kevAdded":null},{"id":"CVE-2021-37651","published":"2021-08-12T21:00:19.000Z","updated":"2024-08-04T01:23:01.436Z","title":"Heap buffer overflow in `FractionalAvgPoolGrad` in TensorFlow","severity":"HIGH","score":7.1,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00174,"kevAdded":null},{"id":"CVE-2021-37650","published":"2021-08-12T21:00:13.000Z","updated":"2024-08-04T01:23:01.462Z","title":"Segfault and heap buffer overflow in `{Experimental,}DatasetToTFRecord` in TensorFlow","severity":"HIGH","score":7.8,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00182,"kevAdded":null},{"id":"CVE-2021-37662","published":"2021-08-12T20:55:11.000Z","updated":"2024-08-04T01:23:01.444Z","title":"Reference binding to nullptr in boosted trees in TensorFlow","severity":"HIGH","score":7.1,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00189,"kevAdded":null},{"id":"CVE-2021-37656","published":"2021-08-12T20:50:22.000Z","updated":"2024-08-04T01:23:01.518Z","title":"Reference binding to nullptr in `RaggedTensorToSparse` in TensorFlow","severity":"HIGH","score":7.1,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00167,"kevAdded":null},{"id":"CVE-2021-37657","published":"2021-08-12T20:50:17.000Z","updated":"2024-08-04T01:23:01.539Z","title":"Reference binding to nullptr in `MatrixDiagV*` ops in TensorFlow","severity":"HIGH","score":7.1,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00167,"kevAdded":null},{"id":"CVE-2021-37658","published":"2021-08-12T20:50:11.000Z","updated":"2024-08-04T01:23:01.440Z","title":"Reference binding to nullptr in `MatrixSetDiagV*` ops in TensorFlow","severity":"HIGH","score":7.1,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00167,"kevAdded":null},{"id":"CVE-2021-37644","published":"2021-08-12T20:35:12.000Z","updated":"2024-08-04T01:23:01.306Z","title":"`std::abort` raised from `TensorListReserve` in TensorFlow","severity":"MEDIUM","score":5.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00152,"kevAdded":null},{"id":"CVE-2021-37654","published":"2021-08-12T20:30:23.000Z","updated":"2024-08-04T01:23:01.509Z","title":"Heap OOB and CHECK fail in `ResourceGather` in TensorFlow","severity":"HIGH","score":7.3,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00167,"kevAdded":null},{"id":"CVE-2021-37641","published":"2021-08-12T20:30:17.000Z","updated":"2024-08-04T01:23:01.426Z","title":"Heap OOB in `RaggedGather` in TensorFlow","severity":"HIGH","score":7.3,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00167,"kevAdded":null},{"id":"CVE-2021-37635","published":"2021-08-12T20:30:11.000Z","updated":"2024-08-04T01:23:01.255Z","title":"Heap out of bounds access in sparse reduction operations in TensorFlow","severity":"HIGH","score":7.3,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00167,"kevAdded":null},{"id":"CVE-2021-37664","published":"2021-08-12T20:25:23.000Z","updated":"2024-08-04T01:23:01.437Z","title":"Heap OOB in boosted trees in TensorFlow","severity":"HIGH","score":7.3,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00167,"kevAdded":null},{"id":"CVE-2021-37659","published":"2021-08-12T20:25:17.000Z","updated":"2024-08-04T01:23:01.517Z","title":"Out of bounds read via null pointer dereference in TensorFlow","severity":"HIGH","score":7.3,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00176,"kevAdded":null},{"id":"CVE-2021-37655","published":"2021-08-12T20:25:10.000Z","updated":"2024-08-04T01:23:01.505Z","title":"Heap OOB in `ResourceScatterUpdate` in TensorFlow","severity":"HIGH","score":7.3,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00167,"kevAdded":null},{"id":"CVE-2021-37637","published":"2021-08-12T18:15:11.000Z","updated":"2024-08-04T01:23:01.356Z","title":"Null pointer dereference in `CompressElement` in TensorFlow","severity":"HIGH","score":7.7,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.0016,"kevAdded":null},{"id":"CVE-2021-37649","published":"2021-08-12T18:10:32.000Z","updated":"2024-08-04T01:23:01.296Z","title":"Null pointer dereference in `UncompressElement` in TensorFlow","severity":"HIGH","score":7.7,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.0016,"kevAdded":null},{"id":"CVE-2021-37647","published":"2021-08-12T18:10:27.000Z","updated":"2024-08-04T01:23:01.556Z","title":"Null pointer dereference in `SparseTensorSliceDataset` in TensorFlow","severity":"HIGH","score":7.7,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.0016,"kevAdded":null},{"id":"CVE-2021-37643","published":"2021-08-12T18:10:21.000Z","updated":"2024-08-04T01:23:01.386Z","title":"Null pointer dereference in `MatrixDiagPartOp` in TensorFlow","severity":"HIGH","score":7.7,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.0016,"kevAdded":null},{"id":"CVE-2021-37639","published":"2021-08-12T18:10:15.000Z","updated":"2024-08-04T01:23:01.249Z","title":"Null pointer dereference and heap OOB read in TensorFlow","severity":"HIGH","score":8.4,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00173,"kevAdded":null},{"id":"CVE-2021-37638","published":"2021-08-12T18:10:10.000Z","updated":"2024-08-04T01:23:01.371Z","title":"Null pointer dereference in `RaggedTensorToTensor` in TensorFlow","severity":"HIGH","score":7.7,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00167,"kevAdded":null},{"id":"CVE-2021-37660","published":"2021-08-12T17:35:27.000Z","updated":"2024-08-04T01:23:01.434Z","title":"Division by 0 in inplace operations in TensorFlow","severity":"MEDIUM","score":5.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00154,"kevAdded":null},{"id":"CVE-2021-37653","published":"2021-08-12T17:35:22.000Z","updated":"2024-08-04T01:23:01.402Z","title":"Division by 0 in `ResourceGather` in TensorFlow","severity":"MEDIUM","score":5.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00152,"kevAdded":null},{"id":"CVE-2021-37642","published":"2021-08-12T17:35:16.000Z","updated":"2024-08-04T01:23:01.345Z","title":"Division by 0 in `ResourceScatterDiv` in TensorFlow","severity":"MEDIUM","score":5.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00154,"kevAdded":null},{"id":"CVE-2021-37640","published":"2021-08-12T17:35:11.000Z","updated":"2024-08-04T01:23:01.525Z","title":"Integer division by 0 in sparse reshaping in TensorFlow","severity":"MEDIUM","score":5.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00152,"kevAdded":null},{"id":"CVE-2021-37636","published":"2021-08-12T17:30:11.000Z","updated":"2024-08-04T01:23:01.388Z","title":"Floating point exception in `SparseDenseCwiseDiv` in TensorFlow","severity":"MEDIUM","score":5.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00152,"kevAdded":null},{"id":"CVE-2021-29513","published":"2021-05-14T19:36:30.000Z","updated":"2024-08-03T22:11:05.380Z","title":"Type confusion during tensor casts lead to dereferencing null pointers","severity":"LOW","score":2.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00204,"kevAdded":null},{"id":"CVE-2021-29514","published":"2021-05-14T19:36:25.000Z","updated":"2024-08-03T22:11:05.431Z","title":"Heap out of bounds write in `RaggedBinCount`","severity":"LOW","score":2.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00211,"kevAdded":null},{"id":"CVE-2021-29515","published":"2021-05-14T19:36:20.000Z","updated":"2024-08-03T22:11:05.742Z","title":"Reference binding to null pointer in `MatrixDiag*` ops","severity":"LOW","score":2.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00201,"kevAdded":null},{"id":"CVE-2021-29516","published":"2021-05-14T19:36:16.000Z","updated":"2024-08-03T22:11:05.513Z","title":"Null pointer dereference via invalid Ragged Tensors","severity":"LOW","score":2.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00198,"kevAdded":null},{"id":"CVE-2021-29517","published":"2021-05-14T19:36:11.000Z","updated":"2024-08-03T22:11:05.568Z","title":"Division by zero in `Conv3D`","severity":"LOW","score":2.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00189,"kevAdded":null},{"id":"CVE-2021-29518","published":"2021-05-14T19:36:06.000Z","updated":"2024-08-03T22:11:05.905Z","title":"Session operations in eager mode lead to null pointer dereferences","severity":"LOW","score":2.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00201,"kevAdded":null},{"id":"CVE-2021-29519","published":"2021-05-14T19:35:58.000Z","updated":"2024-08-03T22:11:05.649Z","title":"CHECK-fail in SparseCross due to type confusion","severity":"LOW","score":2.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00189,"kevAdded":null},{"id":"CVE-2021-29520","published":"2021-05-14T19:35:54.000Z","updated":"2024-08-03T22:11:05.327Z","title":"Heap buffer overflow in `Conv3DBackprop*`","severity":"LOW","score":2.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00224,"kevAdded":null},{"id":"CVE-2021-29521","published":"2021-05-14T19:35:49.000Z","updated":"2024-08-03T22:11:05.725Z","title":"Segfault in SparseCountSparseOutput","severity":"LOW","score":2.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00189,"kevAdded":null},{"id":"CVE-2021-29522","published":"2021-05-14T19:35:44.000Z","updated":"2024-08-03T22:11:05.710Z","title":"Division by 0 in `Conv3DBackprop*`","severity":"LOW","score":2.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00189,"kevAdded":null},{"id":"CVE-2021-29523","published":"2021-05-14T19:35:39.000Z","updated":"2024-08-03T22:11:06.126Z","title":"CHECK-fail in AddManySparseToTensorsMap","severity":"LOW","score":2.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00189,"kevAdded":null},{"id":"CVE-2021-29524","published":"2021-05-14T19:35:34.000Z","updated":"2024-08-03T22:11:05.571Z","title":"Division by 0 in `Conv2DBackpropFilter`","severity":"LOW","score":2.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00189,"kevAdded":null},{"id":"CVE-2021-29585","published":"2021-05-14T19:35:29.000Z","updated":"2024-08-03T22:11:06.264Z","title":"Division by zero in padding computation in TFLite","severity":"LOW","score":2.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00201,"kevAdded":null},{"id":"CVE-2021-29586","published":"2021-05-14T19:35:25.000Z","updated":"2024-08-03T22:11:06.251Z","title":"Division by zero in optimized pooling implementations in TFLite","severity":"LOW","score":2.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00201,"kevAdded":null},{"id":"CVE-2021-29615","published":"2021-05-14T19:25:31.000Z","updated":"2024-08-03T22:11:06.342Z","title":"Stack overflow in `ParseAttrValue` with nested tensors","severity":"LOW","score":2.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00204,"kevAdded":null},{"id":"CVE-2021-29616","published":"2021-05-14T19:25:27.000Z","updated":"2024-08-03T22:11:06.093Z","title":"Null dereference in Grappler's `TrySimplify`","severity":"LOW","score":2.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00206,"kevAdded":null},{"id":"CVE-2021-29617","published":"2021-05-14T19:25:23.000Z","updated":"2024-08-03T22:11:06.281Z","title":"Crash in `tf.strings.substr` due to `CHECK`-fail","severity":"LOW","score":2.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.0023,"kevAdded":null},{"id":"CVE-2021-29618","published":"2021-05-14T19:25:18.000Z","updated":"2024-08-03T22:11:06.261Z","title":"Crash in `tf.transpose` with complex inputs","severity":"LOW","score":2.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.0023,"kevAdded":null},{"id":"CVE-2021-29619","published":"2021-05-14T19:25:13.000Z","updated":"2024-08-03T22:11:06.083Z","title":"Segfault in `tf.raw_ops.SparseCountSparseOutput`","severity":"LOW","score":2.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00194,"kevAdded":null},{"id":"CVE-2021-29587","published":"2021-05-14T19:22:48.000Z","updated":"2024-08-03T22:11:06.247Z","title":"Division by zero in TFLite's implementation of `SpaceToDepth`","severity":"LOW","score":2.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00201,"kevAdded":null},{"id":"CVE-2021-29588","published":"2021-05-14T19:22:44.000Z","updated":"2024-08-03T22:11:06.063Z","title":"Division by zero in TFLite's implementation of `TransposeConv`","severity":"LOW","score":2.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00201,"kevAdded":null},{"id":"CVE-2021-29589","published":"2021-05-14T19:22:39.000Z","updated":"2024-08-03T22:11:06.271Z","title":"Division by zero in TFLite's implementation of `GatherNd`","severity":"LOW","score":2.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00201,"kevAdded":null},{"id":"CVE-2021-29590","published":"2021-05-14T19:22:34.000Z","updated":"2024-08-03T22:11:06.263Z","title":"Heap OOB read in TFLite's implementation of `Minimum` or `Maximum`","severity":"LOW","score":2.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00198,"kevAdded":null},{"id":"CVE-2021-29591","published":"2021-05-14T19:22:29.000Z","updated":"2024-08-03T22:11:06.069Z","title":"Stack overflow due to looping TFLite subgraph","severity":"HIGH","score":7.3,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00262,"kevAdded":null},{"id":"CVE-2021-29592","published":"2021-05-14T19:22:22.000Z","updated":"2024-08-03T22:11:06.276Z","title":"Null pointer dereference in TFLite's `Reshape` operator","severity":"MEDIUM","score":4.4,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00215,"kevAdded":null},{"id":"CVE-2021-29593","published":"2021-05-14T19:22:17.000Z","updated":"2024-08-03T22:11:06.253Z","title":"Division by zero in TFLite's implementation of `BatchToSpaceNd`","severity":"LOW","score":2.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00201,"kevAdded":null},{"id":"CVE-2021-29594","published":"2021-05-14T19:22:10.000Z","updated":"2024-08-03T22:11:06.240Z","title":"Division by zero in TFLite's convolution code","severity":"LOW","score":2.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00201,"kevAdded":null},{"id":"CVE-2021-29595","published":"2021-05-14T19:22:05.000Z","updated":"2024-08-03T22:11:06.254Z","title":"Division by zero in TFLite's implementation of `DepthToSpace`","severity":"LOW","score":2.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00201,"kevAdded":null},{"id":"CVE-2021-29596","published":"2021-05-14T19:22:00.000Z","updated":"2024-08-03T22:11:06.265Z","title":"Division by zero in TFLite's implementation of `EmbeddingLookup`","severity":"LOW","score":2.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00201,"kevAdded":null},{"id":"CVE-2021-29597","published":"2021-05-14T19:21:56.000Z","updated":"2024-08-03T22:11:06.260Z","title":"Division by zero in TFLite's implementation of `SpaceToBatchNd`","severity":"LOW","score":2.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00201,"kevAdded":null},{"id":"CVE-2021-29598","published":"2021-05-14T19:21:51.000Z","updated":"2024-08-03T22:11:06.076Z","title":"Division by zero in TFLite's implementation of `SVDF`","severity":"LOW","score":2.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00201,"kevAdded":null},{"id":"CVE-2021-29599","published":"2021-05-14T19:21:43.000Z","updated":"2024-08-03T22:11:06.267Z","title":"Division by zero in TFLite's implementation of `Split`","severity":"LOW","score":2.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00209,"kevAdded":null},{"id":"CVE-2021-29600","published":"2021-05-14T19:21:37.000Z","updated":"2024-08-03T22:11:06.262Z","title":"Division by zero in TFLite's implementation of `OneHot`","severity":"LOW","score":2.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00201,"kevAdded":null},{"id":"CVE-2021-29601","published":"2021-05-14T19:21:29.000Z","updated":"2024-08-03T22:11:06.247Z","title":"Integer overflow in TFLite concatentation","severity":"MEDIUM","score":6.3,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00192,"kevAdded":null},{"id":"CVE-2021-29602","published":"2021-05-14T19:21:25.000Z","updated":"2024-08-03T22:11:06.092Z","title":"Division by zero in TFLite's implementation of `DepthwiseConv`","severity":"LOW","score":2.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00189,"kevAdded":null},{"id":"CVE-2021-29603","published":"2021-05-14T19:21:20.000Z","updated":"2024-08-03T22:11:06.269Z","title":"Heap OOB write in TFLite","severity":"LOW","score":2.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00201,"kevAdded":null},{"id":"CVE-2021-29604","published":"2021-05-14T19:21:16.000Z","updated":"2024-08-03T22:11:06.082Z","title":"Division by zero in TFLite's implementation of hashtable lookup","severity":"LOW","score":2.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00189,"kevAdded":null},{"id":"CVE-2021-29605","published":"2021-05-14T19:21:12.000Z","updated":"2024-08-03T22:11:06.309Z","title":"Integer overflow in TFLite memory allocation","severity":"HIGH","score":7.1,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.0022,"kevAdded":null},{"id":"CVE-2021-29606","published":"2021-05-14T19:21:07.000Z","updated":"2024-08-03T22:11:06.312Z","title":"Heap OOB read in TFLite","severity":"HIGH","score":7.1,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00215,"kevAdded":null},{"id":"CVE-2021-29607","published":"2021-05-14T19:21:03.000Z","updated":"2024-08-03T22:11:06.315Z","title":"Incomplete validation in `SparseSparseMinimum`","severity":"MEDIUM","score":5.3,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00234,"kevAdded":null},{"id":"CVE-2021-29608","published":"2021-05-14T19:20:58.000Z","updated":"2024-08-03T22:11:06.278Z","title":"Heap OOB and null pointer dereference in `RaggedTensorToTensor`","severity":"MEDIUM","score":5.3,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00234,"kevAdded":null},{"id":"CVE-2021-29609","published":"2021-05-14T19:20:52.000Z","updated":"2024-08-03T22:11:06.266Z","title":"Incomplete validation in `SparseAdd`","severity":"MEDIUM","score":5.3,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00234,"kevAdded":null},{"id":"CVE-2021-29610","published":"2021-05-14T19:20:47.000Z","updated":"2024-08-03T22:11:06.104Z","title":"Invalid validation in `QuantizeAndDequantizeV2`","severity":"LOW","score":3.6,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00201,"kevAdded":null},{"id":"CVE-2021-29611","published":"2021-05-14T19:20:43.000Z","updated":"2024-08-03T22:11:06.304Z","title":"Incomplete validation in `SparseReshape`","severity":"LOW","score":3.6,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00202,"kevAdded":null},{"id":"CVE-2021-29612","published":"2021-05-14T19:20:38.000Z","updated":"2024-08-03T22:11:06.354Z","title":"Heap buffer overflow in `BandedTriangularSolve`","severity":"LOW","score":3.6,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00287,"kevAdded":null},{"id":"CVE-2021-29613","published":"2021-05-14T19:20:33.000Z","updated":"2024-08-03T22:11:06.117Z","title":"Incomplete validation in `tf.raw_ops.CTCLoss`","severity":"MEDIUM","score":6.3,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.0024,"kevAdded":null},{"id":"CVE-2021-29614","published":"2021-05-14T19:20:28.000Z","updated":"2024-08-03T22:11:06.295Z","title":"Interpreter crash from `tf.io.decode_raw`","severity":"HIGH","score":7.1,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00221,"kevAdded":null},{"id":"CVE-2021-29555","published":"2021-05-14T19:17:51.000Z","updated":"2024-08-03T22:11:06.286Z","title":"Division by 0 in `FusedBatchNorm`","severity":"LOW","score":2.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00189,"kevAdded":null},{"id":"CVE-2021-29556","published":"2021-05-14T19:17:46.000Z","updated":"2024-08-03T22:11:06.071Z","title":"Division by 0 in `Reverse`","severity":"LOW","score":2.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00189,"kevAdded":null},{"id":"CVE-2021-29557","published":"2021-05-14T19:17:41.000Z","updated":"2024-08-03T22:11:06.068Z","title":"Division by 0 in `SparseMatMul`","severity":"LOW","score":2.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00189,"kevAdded":null},{"id":"CVE-2021-29558","published":"2021-05-14T19:17:35.000Z","updated":"2024-08-03T22:11:05.646Z","title":"Heap buffer overflow in `SparseSplit`","severity":"LOW","score":2.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00211,"kevAdded":null},{"id":"CVE-2021-29559","published":"2021-05-14T19:17:30.000Z","updated":"2024-08-03T22:11:06.049Z","title":"Heap OOB access in unicode ops","severity":"LOW","score":2.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00198,"kevAdded":null},{"id":"CVE-2021-29560","published":"2021-05-14T19:17:24.000Z","updated":"2024-08-03T22:11:05.665Z","title":"Heap buffer overflow in `RaggedTensorToTensor`","severity":"LOW","score":2.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00208,"kevAdded":null},{"id":"CVE-2021-29561","published":"2021-05-14T19:17:19.000Z","updated":"2024-08-03T22:11:06.084Z","title":"CHECK-fail in `LoadAndRemapMatrix`","severity":"LOW","score":2.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00189,"kevAdded":null},{"id":"CVE-2021-29562","published":"2021-05-14T19:17:12.000Z","updated":"2024-08-03T22:11:06.083Z","title":"CHECK-fail in `tf.raw_ops.IRFFT`","severity":"LOW","score":2.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00189,"kevAdded":null},{"id":"CVE-2021-29563","published":"2021-05-14T19:17:07.000Z","updated":"2024-08-03T22:11:06.263Z","title":"CHECK-fail in `tf.raw_ops.RFFT`","severity":"LOW","score":2.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00189,"kevAdded":null},{"id":"CVE-2021-29564","published":"2021-05-14T19:17:01.000Z","updated":"2024-08-03T22:11:06.243Z","title":"Null pointer dereference in `EditDistance`","severity":"LOW","score":2.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00189,"kevAdded":null},{"id":"CVE-2021-29565","published":"2021-05-14T19:16:56.000Z","updated":"2024-08-03T22:11:06.248Z","title":"Null pointer dereference in `SparseFillEmptyRows`","severity":"LOW","score":2.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00189,"kevAdded":null},{"id":"CVE-2021-29566","published":"2021-05-14T19:16:52.000Z","updated":"2024-08-03T22:11:06.286Z","title":"Heap OOB access in `Dilation2DBackpropInput`","severity":"LOW","score":2.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00201,"kevAdded":null},{"id":"CVE-2021-29567","published":"2021-05-14T19:16:45.000Z","updated":"2024-08-03T22:11:06.248Z","title":"Lack of validation in `SparseDenseCwiseMul`","severity":"LOW","score":2.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00189,"kevAdded":null},{"id":"CVE-2021-29568","published":"2021-05-14T19:16:41.000Z","updated":"2024-08-03T22:11:05.719Z","title":"Reference binding to null in `ParameterizedTruncatedNormal`","severity":"LOW","score":2.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00197,"kevAdded":null},{"id":"CVE-2021-29569","published":"2021-05-14T19:16:36.000Z","updated":"2024-08-03T22:11:05.766Z","title":"Heap out of bounds read in `RequantizationRange`","severity":"LOW","score":2.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00198,"kevAdded":null},{"id":"CVE-2021-29570","published":"2021-05-14T19:16:31.000Z","updated":"2024-08-03T22:11:06.239Z","title":"Heap out of bounds read in `MaxPoolGradWithArgmax`","severity":"LOW","score":2.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00154,"kevAdded":null},{"id":"CVE-2021-29571","published":"2021-05-14T19:16:27.000Z","updated":"2024-08-03T22:11:05.664Z","title":"Memory corruption in `DrawBoundingBoxesV2`","severity":"MEDIUM","score":4.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.0024,"kevAdded":null},{"id":"CVE-2021-29572","published":"2021-05-14T19:16:23.000Z","updated":"2024-08-03T22:11:06.040Z","title":"Reference binding to nullptr in `SdcaOptimizer`","severity":"LOW","score":2.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00189,"kevAdded":null},{"id":"CVE-2021-29573","published":"2021-05-14T19:16:18.000Z","updated":"2024-08-03T22:11:05.676Z","title":"Division by 0 in `MaxPoolGradWithArgmax`","severity":"LOW","score":2.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00189,"kevAdded":null},{"id":"CVE-2021-29574","published":"2021-05-14T19:16:13.000Z","updated":"2024-08-03T22:11:06.261Z","title":"Undefined behavior in `MaxPool3DGradGrad`","severity":"LOW","score":2.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00201,"kevAdded":null},{"id":"CVE-2021-29575","published":"2021-05-14T19:16:09.000Z","updated":"2024-08-03T22:11:06.085Z","title":"Overflow/denial of service in `tf.raw_ops.ReverseSequence`","severity":"LOW","score":2.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00198,"kevAdded":null},{"id":"CVE-2021-29576","published":"2021-05-14T19:16:04.000Z","updated":"2024-08-03T22:11:06.062Z","title":"Heap buffer overflow in `MaxPool3DGradGrad`","severity":"LOW","score":2.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00211,"kevAdded":null},{"id":"CVE-2021-29577","published":"2021-05-14T19:15:59.000Z","updated":"2024-08-03T22:11:05.644Z","title":"Heap buffer overflow in `AvgPool3DGrad`","severity":"LOW","score":2.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00211,"kevAdded":null},{"id":"CVE-2021-29578","published":"2021-05-14T19:15:54.000Z","updated":"2024-08-03T22:11:05.849Z","title":"Heap buffer overflow in `FractionalAvgPoolGrad`","severity":"LOW","score":2.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00211,"kevAdded":null},{"id":"CVE-2021-29579","published":"2021-05-14T19:15:50.000Z","updated":"2024-08-03T22:11:06.232Z","title":"Heap buffer overflow in `MaxPoolGrad`","severity":"LOW","score":2.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00214,"kevAdded":null},{"id":"CVE-2021-29580","published":"2021-05-14T19:15:43.000Z","updated":"2024-08-03T22:11:06.079Z","title":"Undefined behavior and `CHECK`-fail in `FractionalMaxPoolGrad`","severity":"LOW","score":2.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00189,"kevAdded":null},{"id":"CVE-2021-29581","published":"2021-05-14T19:15:38.000Z","updated":"2024-08-03T22:11:05.850Z","title":"Segfault in `CTCBeamSearchDecoder`","severity":"LOW","score":2.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00189,"kevAdded":null},{"id":"CVE-2021-29582","published":"2021-05-14T19:15:34.000Z","updated":"2024-08-03T22:11:06.285Z","title":"Heap OOB read in `tf.raw_ops.Dequantize`","severity":"LOW","score":2.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00198,"kevAdded":null},{"id":"CVE-2021-29583","published":"2021-05-14T19:15:27.000Z","updated":"2024-08-03T22:11:06.268Z","title":"Heap buffer overflow and undefined behavior in `FusedBatchNorm`","severity":"LOW","score":2.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00211,"kevAdded":null},{"id":"CVE-2021-29584","published":"2021-05-14T19:15:22.000Z","updated":"2024-08-03T22:11:06.088Z","title":"CHECK-fail due to integer overflow","severity":"LOW","score":2.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00189,"kevAdded":null},{"id":"CVE-2021-29525","published":"2021-05-14T19:12:43.000Z","updated":"2024-08-03T22:11:05.490Z","title":"Division by 0 in `Conv2DBackpropInput`","severity":"LOW","score":2.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00201,"kevAdded":null},{"id":"CVE-2021-29526","published":"2021-05-14T19:12:38.000Z","updated":"2024-08-03T22:11:05.894Z","title":"Division by 0 in `Conv2D`","severity":"LOW","score":2.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00198,"kevAdded":null},{"id":"CVE-2021-29527","published":"2021-05-14T19:12:33.000Z","updated":"2024-08-03T22:11:05.561Z","title":"Division by 0 in `QuantizedConv2D`","severity":"LOW","score":2.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00189,"kevAdded":null},{"id":"CVE-2021-29528","published":"2021-05-14T19:12:28.000Z","updated":"2024-08-03T22:11:06.075Z","title":"Division by 0 in `QuantizedMul`","severity":"LOW","score":2.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00189,"kevAdded":null},{"id":"CVE-2021-29529","published":"2021-05-14T19:12:22.000Z","updated":"2024-08-03T22:11:05.306Z","title":"Heap buffer overflow caused by rounding","severity":"LOW","score":2.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00251,"kevAdded":null},{"id":"CVE-2021-29530","published":"2021-05-14T19:12:17.000Z","updated":"2024-08-03T22:11:05.410Z","title":"Invalid validation in `SparseMatrixSparseCholesky`","severity":"LOW","score":2.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00232,"kevAdded":null},{"id":"CVE-2021-29531","published":"2021-05-14T19:12:12.000Z","updated":"2024-08-03T22:11:05.385Z","title":"CHECK-fail in tf.raw_ops.EncodePng","severity":"LOW","score":2.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00189,"kevAdded":null},{"id":"CVE-2021-29532","published":"2021-05-14T19:12:07.000Z","updated":"2024-08-03T22:11:05.388Z","title":"Heap out of bounds read in `RaggedCross`","severity":"LOW","score":2.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00198,"kevAdded":null},{"id":"CVE-2021-29533","published":"2021-05-14T19:12:02.000Z","updated":"2024-08-03T22:11:05.771Z","title":"CHECK-fail in DrawBoundingBoxes","severity":"LOW","score":2.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00217,"kevAdded":null},{"id":"CVE-2021-29534","published":"2021-05-14T19:11:57.000Z","updated":"2024-08-03T22:11:05.772Z","title":"CHECK-fail in SparseConcat","severity":"LOW","score":2.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00189,"kevAdded":null},{"id":"CVE-2021-29535","published":"2021-05-14T19:11:52.000Z","updated":"2024-08-03T22:11:05.562Z","title":"Heap buffer overflow in `QuantizedMul`","severity":"LOW","score":2.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00211,"kevAdded":null},{"id":"CVE-2021-29536","published":"2021-05-14T19:11:46.000Z","updated":"2024-08-03T22:11:05.449Z","title":"Heap buffer overflow in `QuantizedReshape`","severity":"LOW","score":2.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00211,"kevAdded":null},{"id":"CVE-2021-29537","published":"2021-05-14T19:11:41.000Z","updated":"2024-08-03T22:11:05.558Z","title":"Heap buffer overflow in `QuantizedResizeBilinear`","severity":"LOW","score":2.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00211,"kevAdded":null},{"id":"CVE-2021-29538","published":"2021-05-14T19:11:36.000Z","updated":"2024-08-03T22:11:05.489Z","title":"Division by zero in `Conv2DBackpropFilter`","severity":"LOW","score":2.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00189,"kevAdded":null},{"id":"CVE-2021-29539","published":"2021-05-14T19:11:32.000Z","updated":"2024-08-03T22:11:06.067Z","title":"Segfault in tf.raw_ops.ImmutableConst","severity":"LOW","score":2.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00189,"kevAdded":null},{"id":"CVE-2021-29540","published":"2021-05-14T19:11:26.000Z","updated":"2024-08-03T22:11:05.650Z","title":"Heap buffer overflow in `Conv2DBackpropFilter`","severity":"LOW","score":2.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00215,"kevAdded":null},{"id":"CVE-2021-29541","published":"2021-05-14T19:11:21.000Z","updated":"2024-08-03T22:11:05.695Z","title":"Null pointer dereference in `StringNGrams`","severity":"LOW","score":2.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00189,"kevAdded":null},{"id":"CVE-2021-29542","published":"2021-05-14T19:11:17.000Z","updated":"2024-08-03T22:11:05.402Z","title":"Heap buffer overflow in `StringNGrams`","severity":"LOW","score":2.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00198,"kevAdded":null},{"id":"CVE-2021-29543","published":"2021-05-14T19:11:12.000Z","updated":"2024-08-03T22:11:06.262Z","title":"CHECK-fail in `CTCGreedyDecoder`","severity":"LOW","score":2.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00189,"kevAdded":null},{"id":"CVE-2021-29544","published":"2021-05-14T19:11:06.000Z","updated":"2024-10-31T20:41:21.258Z","title":"CHECK-fail in `QuantizeAndDequantizeV4Grad`","severity":"LOW","score":2.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.0031,"kevAdded":null},{"id":"CVE-2021-29545","published":"2021-05-14T19:11:00.000Z","updated":"2024-08-03T22:11:05.602Z","title":"Heap buffer overflow in `SparseTensorToCSRSparseMatrix`","severity":"LOW","score":2.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00189,"kevAdded":null},{"id":"CVE-2021-29546","published":"2021-05-14T19:10:55.000Z","updated":"2024-08-03T22:11:05.508Z","title":"Division by 0 in `QuantizedBiasAdd`","severity":"LOW","score":2.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00201,"kevAdded":null},{"id":"CVE-2021-29547","published":"2021-05-14T19:10:50.000Z","updated":"2024-08-03T22:11:05.426Z","title":"Heap out of bounds in `QuantizedBatchNormWithGlobalNormalization`","severity":"LOW","score":2.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00189,"kevAdded":null},{"id":"CVE-2021-29548","published":"2021-05-14T19:10:46.000Z","updated":"2024-08-03T22:11:05.702Z","title":"Division by 0 in `QuantizedBatchNormWithGlobalNormalization`","severity":"LOW","score":2.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00189,"kevAdded":null},{"id":"CVE-2021-29549","published":"2021-05-14T19:10:41.000Z","updated":"2024-08-03T22:11:05.522Z","title":"Division by 0 in `QuantizedAdd`","severity":"LOW","score":2.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00189,"kevAdded":null},{"id":"CVE-2021-29550","published":"2021-05-14T19:10:36.000Z","updated":"2024-08-03T22:11:05.613Z","title":"Division by 0 in `FractionalAvgPool`","severity":"LOW","score":2.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00189,"kevAdded":null},{"id":"CVE-2021-29551","published":"2021-05-14T19:10:30.000Z","updated":"2024-08-03T22:11:05.916Z","title":"OOB read in `MatrixTriangularSolve`","severity":"LOW","score":2.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00217,"kevAdded":null},{"id":"CVE-2021-29552","published":"2021-05-14T19:10:25.000Z","updated":"2024-08-03T22:11:05.801Z","title":"CHECK-failure in `UnsortedSegmentJoin`","severity":"LOW","score":2.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00189,"kevAdded":null},{"id":"CVE-2021-29553","published":"2021-05-14T19:10:20.000Z","updated":"2024-08-03T22:11:05.664Z","title":"Heap OOB in `QuantizeAndDequantizeV3`","severity":"LOW","score":2.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00198,"kevAdded":null},{"id":"CVE-2021-29554","published":"2021-05-14T19:10:15.000Z","updated":"2024-08-03T22:11:06.254Z","title":"Division by 0 in `DenseCountSparseOutput`","severity":"LOW","score":2.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00189,"kevAdded":null},{"id":"CVE-2021-29512","published":"2021-05-14T18:55:10.000Z","updated":"2024-08-03T22:11:05.767Z","title":"Heap buffer overflow in `RaggedBinCount`","severity":"LOW","score":2.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00211,"kevAdded":null},{"id":"CVE-2020-26266","published":"2020-12-10T22:10:47.000Z","updated":"2024-08-04T15:56:04.617Z","title":"Uninitialized memory access in Eigen types in TensorFlow","severity":"MEDIUM","score":4.4,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00261,"kevAdded":null},{"id":"CVE-2020-26267","published":"2020-12-10T22:10:40.000Z","updated":"2024-08-04T15:56:04.539Z","title":"Lack of validation in data format attributes in TensorFlow","severity":"MEDIUM","score":4.4,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00243,"kevAdded":null},{"id":"CVE-2020-26268","published":"2020-12-10T22:10:35.000Z","updated":"2024-08-04T15:56:03.596Z","title":"Write to immutable memory region in TensorFlow","severity":"MEDIUM","score":4.4,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00212,"kevAdded":null},{"id":"CVE-2020-26269","published":"2020-12-10T22:10:28.000Z","updated":"2024-08-04T15:56:04.075Z","title":"Heap out of bounds read in filesystem glob matching in TensorFlow","severity":"HIGH","score":7.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00697,"kevAdded":null},{"id":"CVE-2020-26270","published":"2020-12-10T22:10:23.000Z","updated":"2024-08-04T15:56:03.807Z","title":"CHECK-fail in LSTM with zero-length input in TensorFlow","severity":"MEDIUM","score":4.4,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00173,"kevAdded":null},{"id":"CVE-2020-26271","published":"2020-12-10T22:10:14.000Z","updated":"2024-08-04T15:56:04.342Z","title":"Heap out of bounds access in MakeEdge in TensorFlow","severity":"MEDIUM","score":4.4,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00216,"kevAdded":null},{"id":"CVE-2020-15266","published":"2020-10-21T20:30:16.000Z","updated":"2024-08-04T13:15:18.938Z","title":"Undefined behavior in Tensorflow","severity":"LOW","score":3.7,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.0094,"kevAdded":null},{"id":"CVE-2020-15265","published":"2020-10-21T20:20:15.000Z","updated":"2024-08-04T13:15:19.748Z","title":"Segfault in Tensorflow","severity":"MEDIUM","score":5.9,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00908,"kevAdded":null},{"id":"CVE-2020-15212","published":"2020-09-25T18:50:34.000Z","updated":"2024-08-04T13:08:22.919Z","title":"Out of bounds access in tensorflow-lite","severity":"HIGH","score":8.1,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00737,"kevAdded":null},{"id":"CVE-2020-15213","published":"2020-09-25T18:50:29.000Z","updated":"2024-08-04T13:08:22.853Z","title":"Denial of service in tensorflow-lite","severity":"MEDIUM","score":4,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.0076,"kevAdded":null},{"id":"CVE-2020-15214","published":"2020-09-25T18:50:23.000Z","updated":"2024-08-04T13:08:22.895Z","title":"Out of bounds write in tensorflow-lite","severity":"HIGH","score":8.1,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00671,"kevAdded":null},{"id":"CVE-2020-15201","published":"2020-09-25T18:46:21.000Z","updated":"2024-08-04T13:08:22.883Z","title":"Heap buffer overflow in Tensorflow","severity":"MEDIUM","score":4.8,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00568,"kevAdded":null},{"id":"CVE-2020-15202","published":"2020-09-25T18:46:15.000Z","updated":"2024-08-04T13:08:22.926Z","title":"Integer truncation in Shard API usage","severity":"CRITICAL","score":9,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.01287,"kevAdded":null},{"id":"CVE-2020-15203","published":"2020-09-25T18:46:08.000Z","updated":"2024-08-04T13:08:22.972Z","title":"Denial of Service in Tensorflow","severity":"HIGH","score":7.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00965,"kevAdded":null},{"id":"CVE-2020-15204","published":"2020-09-25T18:46:02.000Z","updated":"2024-08-04T13:08:22.924Z","title":"Segfault in Tensorflow","severity":"MEDIUM","score":5.3,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00903,"kevAdded":null},{"id":"CVE-2020-15205","published":"2020-09-25T18:45:57.000Z","updated":"2024-08-04T13:08:22.698Z","title":"Data leak in Tensorflow","severity":"CRITICAL","score":9,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.01029,"kevAdded":null},{"id":"CVE-2020-15206","published":"2020-09-25T18:45:51.000Z","updated":"2024-08-04T13:08:22.955Z","title":"Denial of Service in Tensorflow","severity":"CRITICAL","score":9,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00956,"kevAdded":null},{"id":"CVE-2020-15207","published":"2020-09-25T18:45:46.000Z","updated":"2024-08-04T13:08:22.887Z","title":"Segfault and data corruption in tensorflow-lite","severity":"HIGH","score":8.7,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.01243,"kevAdded":null},{"id":"CVE-2020-15208","published":"2020-09-25T18:45:40.000Z","updated":"2024-08-04T13:08:22.832Z","title":"Data corruption in tensorflow-lite","severity":"HIGH","score":7.4,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00905,"kevAdded":null},{"id":"CVE-2020-15209","published":"2020-09-25T18:45:35.000Z","updated":"2024-08-04T13:08:22.925Z","title":"Null pointer dereference in tensorflow-lite","severity":"MEDIUM","score":5.9,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.008,"kevAdded":null},{"id":"CVE-2020-15210","published":"2020-09-25T18:45:30.000Z","updated":"2024-08-04T13:08:22.871Z","title":"Segmentation fault in tensorflow-lite","severity":"MEDIUM","score":6.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00739,"kevAdded":null},{"id":"CVE-2020-15211","published":"2020-09-25T18:45:24.000Z","updated":"2024-08-04T13:08:22.936Z","title":"Out of bounds access in tensorflow-lite","severity":"MEDIUM","score":4.8,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00917,"kevAdded":null},{"id":"CVE-2020-15191","published":"2020-09-25T18:41:01.000Z","updated":"2024-08-04T13:08:22.683Z","title":"Undefined behavior in Tensorflow","severity":"MEDIUM","score":5.3,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.009,"kevAdded":null},{"id":"CVE-2020-15192","published":"2020-09-25T18:40:56.000Z","updated":"2024-08-04T13:08:22.666Z","title":"Memory leak in Tensorflow","severity":"MEDIUM","score":4.3,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00834,"kevAdded":null},{"id":"CVE-2020-15193","published":"2020-09-25T18:40:51.000Z","updated":"2024-08-04T13:08:22.677Z","title":"Memory corruption in Tensorflow","severity":"HIGH","score":7.1,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.0083,"kevAdded":null},{"id":"CVE-2020-15194","published":"2020-09-25T18:40:46.000Z","updated":"2024-08-04T13:08:22.713Z","title":"Denial of Service in Tensorflow","severity":"MEDIUM","score":5.3,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.01026,"kevAdded":null},{"id":"CVE-2020-15195","published":"2020-09-25T18:40:41.000Z","updated":"2024-08-04T13:08:22.718Z","title":"Heap buffer overflow in Tensorflow","severity":"HIGH","score":8.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.0095,"kevAdded":null},{"id":"CVE-2020-15196","published":"2020-09-25T18:40:36.000Z","updated":"2024-08-04T13:08:22.710Z","title":"Heap buffer overflow in Tensorflow","severity":"HIGH","score":8.5,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00911,"kevAdded":null},{"id":"CVE-2020-15197","published":"2020-09-25T18:40:31.000Z","updated":"2024-08-04T13:08:22.735Z","title":"Denial of Service in Tensorflow","severity":"MEDIUM","score":6.3,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00726,"kevAdded":null},{"id":"CVE-2020-15198","published":"2020-09-25T18:40:25.000Z","updated":"2024-08-04T13:08:22.711Z","title":"Heap buffer overflow in Tensorflow","severity":"MEDIUM","score":5.4,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00542,"kevAdded":null},{"id":"CVE-2020-15199","published":"2020-09-25T18:40:20.000Z","updated":"2024-08-04T13:08:22.934Z","title":"Denial of Service in Tensorflow","severity":"MEDIUM","score":5.9,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00812,"kevAdded":null},{"id":"CVE-2020-15200","published":"2020-09-25T18:40:15.000Z","updated":"2024-08-04T13:08:22.775Z","title":"Segfault in Tensorflow","severity":"MEDIUM","score":5.9,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00851,"kevAdded":null},{"id":"CVE-2020-15190","published":"2020-09-25T18:35:13.000Z","updated":"2024-08-04T13:08:22.683Z","title":"Segfault in Tensorflow","severity":"MEDIUM","score":5.3,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00943,"kevAdded":null},{"id":"CVE-2020-5215","published":"2020-01-28T21:20:15.000Z","updated":"2024-08-04T08:22:09.071Z","title":"Segmentation faultin TensorFlow when converting a Python string to tf.float16","severity":"MEDIUM","score":5,"vendor":"TensorFlow","product":"TensorFlow","kev":false,"epss":0.00588,"kevAdded":null},{"id":"CVE-2019-16778","published":"2019-12-16T20:15:14.000Z","updated":"2024-08-05T01:24:48.540Z","title":"Heap buffer overflow in `UnsortedSegmentSum` in TensorFlow","severity":"LOW","score":2.6,"vendor":"tensorflow","product":"tensorflow","kev":false,"epss":0.00788,"kevAdded":null}]}