cve.bz

CVE-2020-15191

5.3 mediumEPSS 0.9%

Medium (5.3). EPSS 0.9% chance of exploitation in the next 30 days. Fixed in tensorflow 2.2.1, 2.3.1.

In Tensorflow before versions 2.2.1 and 2.3.1, if a user passes an invalid argument to `dlpack.to_dlpack` the expected validations will cause variables to bind to `nullptr` while setting a `status` variable to the error condition. However, this `status` argument is not properly checked. Hence, code following these methods will bind references to null pointers. This is undefined behavior and reported as an error if compiling with `-fsanitize=null`. The issue is patched in commit 22e07fb204386768e5bcbea563641ea11f96ceb8 and is released in TensorFlow versions 2.2.1, or 2.3.1.

Severity

CVSS 3.1

5.3 medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
EPSS
0.9% chance of exploitation in the next 30 days; higher than 59% of CVEs (scores of 2026-10-31)
CWEs
CWE-252, CWE-20, CWE-476
Published
Modified
Record from
the NVD, synced

Affected

Packages (OSV)

AdvisoryEcosystemPackageAffectedFixed in
GHSA-q8qj-fc9q-cphrPyPItensorflow>=2.2.0 <2.2.12.2.1
GHSA-q8qj-fc9q-cphrPyPItensorflow>=2.3.0 <2.3.12.3.1
GHSA-q8qj-fc9q-cphrPyPItensorflow-cpu>=2.2.0 <2.2.12.2.1
GHSA-q8qj-fc9q-cphrPyPItensorflow-cpu>=2.3.0 <2.3.12.3.1
GHSA-q8qj-fc9q-cphrPyPItensorflow-gpu>=2.2.0 <2.2.12.2.1
GHSA-q8qj-fc9q-cphrPyPItensorflow-gpu>=2.3.0 <2.3.12.3.1
PYSEC-2020-114PyPItensorflow<2.2.1
>=2.3.0rc0 <2.3.1		2.2.1, 2.3.1
PYSEC-2020-271PyPItensorflow-cpu<2.2.1
>=2.3.0rc0 <2.3.1		2.2.1, 2.3.1
PYSEC-2020-306PyPItensorflow-gpu<2.2.1
>=2.3.0rc0 <2.3.1		2.2.1, 2.3.1

References

Check your stackJSON