Skip to content

TensorFlow · weakness class

Input Validation and Logic

65 CVEs

Every dot is a CVE in what this vendor ships; the named ones are the most at risk.

Every one of the 65 is a mark on the map. Named now: 1 to 26, most at risk first.

  1. Crash when type cannot be specialized in TensorflowCVE-2022-23572tensorflow · CVSS 6.5 · 1.0% likely

    CWE-754

  2. Crash due to erroneous `StatusOr` in TensorflowCVE-2022-23590tensorflow · CVSS 5.9 · 1.0% likely

    CWE-754

  3. Denial of Service in TensorflowCVE-2020-15203tensorflow · CVSS 7.5 · 1.0% likely

    CWE-20

  4. Denial of Service in TensorflowCVE-2020-15206tensorflow · CVSS 9 · 1.0% likely

    CWE-20

  5. Segfault in `simplifyBroadcast` in TensorflowCVE-2022-23593tensorflow · CVSS 5.9 · 0.9% likely

    CWE-754

  6. Memory leak in TensorflowCVE-2020-15192tensorflow · CVSS 4.3 · 0.8% likely

    CWE-20

  7. Denial of Service in TensorflowCVE-2020-15199tensorflow · CVSS 5.9 · 0.8% likely

    CWE-20

  8. Segfault TFLite converter on per-channel quantized transposed convolutions in TensorFlowCVE-2022-36027tensorflow · CVSS 5.9 · 0.8% likely

    CWE-20

  9. Segmentation fault in tensorflow-liteCVE-2020-15210tensorflow · CVSS 6.5 · 0.7% likely

    CWE-20

  10. Segmentation faultin TensorFlow when converting a Python string to tf.float16CVE-2020-5215TensorFlow · CVSS 5 · 0.6% likely

    CWE-754

  11. Segfault in `CompositeTensorVariantToComponents` in TensorflowCVE-2022-41909tensorflow · CVSS 4.8 · 0.5% likely

    CWE-20

  12. Segfault in `Requantize` in TensorFlowCVE-2022-36017tensorflow · CVSS 5.9 · 0.5% likely

    CWE-20

  13. Segfault in `RaggedBincount` in TensorFlowCVE-2022-35986tensorflow · CVSS 5.9 · 0.5% likely

    CWE-20

  14. Segfault in `SparseBincount` in TensorFlowCVE-2022-35982tensorflow · CVSS 5.9 · 0.5% likely

    CWE-20

  15. Segfault in `QuantizedRelu` and `QuantizedRelu6`CVE-2022-35979tensorflow · CVSS 5.9 · 0.5% likely

    CWE-20

  16. Segfault in `QuantizeDownAndShrinkRange` in TensorFlowCVE-2022-35974tensorflow · CVSS 5.9 · 0.5% likely

    CWE-20

  17. Segfault in `QuantizedMatMul` in TensorFlowCVE-2022-35973tensorflow · CVSS 5.9 · 0.5% likely

    CWE-20

  18. Segfault in `QuantizedInstanceNorm` in TensorFlowCVE-2022-35970tensorflow · CVSS 5.9 · 0.5% likely

    CWE-20

  19. `CHECK` fail via inputs in `PyFunc` in TensorflowCVE-2022-41908tensorflow · CVSS 4.8 · 0.5% likely

    CWE-20

  20. Segfault in `QuantizedBiasAdd` in TensorFlowCVE-2022-35972tensorflow · CVSS 5.9 · 0.5% likely

    CWE-20

  21. Segfault in `QuantizedAdd` in TensorFlowCVE-2022-35967tensorflow · CVSS 5.9 · 0.5% likely

    CWE-20

  22. Segfault in `QuantizedAvgPool` in TensorFlowCVE-2022-35966tensorflow · CVSS 5.9 · 0.5% likely

    CWE-20

  23. Segfault in `BlockLSTMGradV2` in TensorFlowCVE-2022-35964tensorflow · CVSS 5.9 · 0.5% likely

    CWE-20

  24. `CHECK_EQ` fail via input in `SparseMatrixNNZ` in TensorflowCVE-2022-41901tensorflow · CVSS 4.8 · 0.5% likely

    CWE-20

  25. `CHECK` fail via inputs in `SdcaOptimizer` in TensorflowCVE-2022-41899tensorflow · CVSS 4.8 · 0.5% likely

    CWE-20

  26. `CHECK` fail via inputs in `SparseFillEmptyRowsGrad` in TensorflowCVE-2022-41898tensorflow · CVSS 4.8 · 0.5% likely

    CWE-20

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-14 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.