CVSS 3.1
5.4 mediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:NCVE-2020-15198
Medium (5.4) in google tensorflow. EPSS 0.5% chance of exploitation in the next 30 days. Fixed in tensorflow 2.3.1.
In Tensorflow before version 2.3.1, the `SparseCountSparseOutput` implementation does not validate that the input arguments form a valid sparse tensor. In particular, there is no validation that the `indices` tensor has the same shape as the `values` one. The values in these tensors are always accessed in parallel. Thus, a shape mismatch can result in accesses outside the bounds of heap allocated buffers. The issue is patched in commit 3cbb917b4714766030b28eba9fb41bb97ce9ee02 and is released in TensorFlow version 2.3.1.
Severity
- EPSS
- 0.5% chance of exploitation in the next 30 days; higher than 45% of CVEs (scores of 2026-10-31)
- CWEs
- CWE-119, CWE-122
- Published
- Modified
- Record from
- the NVD, synced
Affected
- google:tensorflow
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-jc87-6vpp-7ff3 | PyPI | tensorflow | >=2.3.0 <2.3.1 | 2.3.1 |
| GHSA-jc87-6vpp-7ff3 | PyPI | tensorflow-cpu | >=2.3.0 <2.3.1 | 2.3.1 |
| GHSA-jc87-6vpp-7ff3 | PyPI | tensorflow-gpu | >=2.3.0 <2.3.1 | 2.3.1 |
| PYSEC-2020-121 | PyPI | tensorflow | <2.3.1 | 2.3.1 |
| PYSEC-2020-278 | PyPI | tensorflow-cpu | <2.3.1 | 2.3.1 |
| PYSEC-2020-313 | PyPI | tensorflow-gpu | <2.3.1 | 2.3.1 |
References
- https://github.com/tensorflow/tensorflow/commit/3cbb917b4714766030b28eba9fb41bb97ce9ee02
- https://github.com/tensorflow/tensorflow/releases/tag/v2.3.1
- https://github.com/tensorflow/tensorflow/security/advisories/GHSA-jc87-6vpp-7ff3
- https://github.com/tensorflow/tensorflow/commit/3cbb917b4714766030b28eba9fb41bb97ce9ee02
- https://github.com/tensorflow/tensorflow/releases/tag/v2.3.1