Skip to content

TensorFlow · weakness class

Denial of Service

112 CVEs

Every dot is a CVE in what this vendor ships; the named ones are the most at risk.

Every one of the 112 is a mark on the map. Named now: 1 to 26, most at risk first.

  1. `CHECK`-failures during Grappler's `IsSimplifiableReshape` in TensorflowCVE-2022-23581tensorflow · CVSS 6.5 · 1.2% likely

    CWE-617

  2. Denial of Service in TensorflowCVE-2020-15194tensorflow · CVSS 5.3 · 1.0% likely

    CWE-617

  3. Memory leak in decoding PNG images in TensorflowCVE-2022-23585tensorflow · CVSS 4.3 · 1.0% likely

    CWE-401

  4. `CHECK`-failures in binary ops in TensorflowCVE-2022-23583tensorflow · CVSS 6.5 · 0.9% likely

    CWE-617

  5. `CHECK`-fails due to attempting to build a reference tensor in TensorflowCVE-2022-23588tensorflow · CVSS 6.5 · 0.9% likely

    CWE-617

  6. Abort caused by allocating a vector that is too large in TensorflowCVE-2022-23580tensorflow · CVSS 6.5 · 0.8% likely

    CWE-400

  7. `CHECK`-failures during Grappler's `SafeToRemoveIdentity` in TensorflowCVE-2022-23579tensorflow · CVSS 6.5 · 0.8% likely

    CWE-617

  8. Multiple `CHECK`-fails in `function.cc` in TensorflowCVE-2022-23586tensorflow · CVSS 6.5 · 0.8% likely

    CWE-617

  9. Stack overflow in TensorflowCVE-2022-23591tensorflow · CVSS 7.5 · 0.8% likely

    CWE-400

  10. `CHECK`-failures in `TensorByteSize` in TensorflowCVE-2022-23582tensorflow · CVSS 6.5 · 0.8% likely

    CWE-617

  11. Division by zero in TFLiteCVE-2022-23557tensorflow · CVSS 6.5 · 0.8% likely

    CWE-369

  12. `CHECK` failure in `AvgPoolOp` in TensorflowCVE-2022-35941tensorflow · CVSS 5.9 · 0.7% likely

    CWE-617

  13. `CHECK` failures in `UnbatchGradOp` in TensorFlowCVE-2022-35952tensorflow · CVSS 5.9 · 0.7% likely

    CWE-617

  14. Denial of Service in TensorflowCVE-2020-15197tensorflow · CVSS 6.3 · 0.7% likely

    CWE-617

  15. Memory leak in TensorflowCVE-2022-23578tensorflow · CVSS 4.3 · 0.7% likely

    CWE-401

  16. `CHECK`-fail in `tensorflow::full_type::SubstituteFromAttrs` in TensorFlowCVE-2022-36016tensorflow · CVSS 5.9 · 0.7% likely

    CWE-617

  17. Assertion fail on MLIR empty edge names in TensorFlowCVE-2022-36012tensorflow · CVSS 5.9 · 0.7% likely

    CWE-617

  18. `CHECK` failure in `TensorListReserve` in TensorFlowCVE-2022-35960tensorflow · CVSS 5.9 · 0.7% likely

    CWE-617

  19. `CHECK` fail in `TensorListScatter` and `TensorListScatterV2` in TensorFlowCVE-2022-35991tensorflow · CVSS 5.9 · 0.5% likely

    CWE-617

  20. `CHECK` failure in `SobolSample` via missing validation in TensorFlowCVE-2022-35935tensorflow · CVSS 5.9 · 0.5% likely

    CWE-617

  21. `CHECK` fail in `tf.random.gamma` in TensorFlowCVE-2022-36004tensorflow · CVSS 5.9 · 0.5% likely

    CWE-617

  22. `CHECK` fail in `EmptyTensorList` in TensorFlowCVE-2022-35998tensorflow · CVSS 5.9 · 0.5% likely

    CWE-617

  23. `CHECK` fail in `tf.sparse.cross` in TensorFlowCVE-2022-35997tensorflow · CVSS 5.9 · 0.5% likely

    CWE-617

  24. `CHECK` fail in `tf.linalg.matrix_rank` in TensorFlowCVE-2022-35988tensorflow · CVSS 5.9 · 0.5% likely

    CWE-617

  25. `CHECK_EQ` fail in `tf.raw_ops.TensorListResize` in TensorflowCVE-2022-41893tensorflow · CVSS 4.8 · 0.5% likely

    CWE-617

  26. `CHECK` fail in `QuantizeAndDequantizeV3` in TensorFlowCVE-2022-36026tensorflow · CVSS 5.9 · 0.5% likely

    CWE-617

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-14 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.