AI Threat Alert

TensorFlow Vulnerabilities

pip ML Libraries

AI Threat Alert tracks 438 known vulnerabilities in TensorFlow, 18 rated critical — an AI/ML ml libraries in the pip ecosystem. Each CVE includes CVSS severity, EPSS exploit probability, patch status, and CISO-grade analysis.

Data sources

67

Risk Score

438

Total CVEs

18

Critical

pip

Ecosystem

Aug 10, 2026

Last CVE

4%

Patch Rate

1372d

Avg Time to Patch

197,048 stars 76,043 forks 2,858 issues 3,744 dependents Last push Aug 16, 2026

OpenSSF Scorecard 7.4/10

Known Vulnerabilities (438 total, page 1 of 18)

Severity CVE ID Summary CVSS Published

HIGH CVE-2026-18941 Feast: no-auth default enables RCE via malicious UDF 7.7 Aug 10, 2026 CRITICAL CVE-2026-18948 Feast: insecure UDF deserialization enables RCE 9.9 Aug 10, 2026 MEDIUM CVE-2026-18942 Feast operator: code injection escalates to cluster admin 5.5 Aug 10, 2026 HIGH CVE-2026-18947 Feast: authz bypass in /materialize triggers DoS 8.5 Aug 10, 2026 HIGH CVE-2025-55559 TensorFlow: DoS via Conv2D valid padding crash 7.5 Sep 25, 2025 MEDIUM CVE-2025-55556 TensorFlow: non-deterministic compilation breaks Embedding 6.5 Sep 25, 2025 HIGH CVE-2025-0649 TensorFlow Serving: JSON recursion DoS on inference API 7.5 May 6, 2025 HIGH CVE-2023-33976 TensorFlow: DoS via upper_bound rank validation crash 7.5 Jul 30, 2024 MEDIUM CVE-2023-30767 Intel TF Opt: buffer overflow enables local privesc 6.7 Feb 14, 2024 HIGH CVE-2023-27506 Intel TF Opt: buffer overflow enables local priv-esc 7.8 Aug 11, 2023 MEDIUM CVE-2023-25661 TensorFlow: DoS via malformed Convolution3D input 6.5 Mar 27, 2023 HIGH CVE-2023-27579 TensorFlow Lite: FPE in tflite model crashes inference runtime 7.5 Mar 25, 2023 HIGH CVE-2023-25801 TensorFlow: double-free in pooling ops enables RCE 7.8 Mar 25, 2023 HIGH CVE-2023-25676 TensorFlow: NULL ptr deref DoS in ParallelConcat op 7.5 Mar 25, 2023 HIGH CVE-2023-25675 TensorFlow XLA: Bincount shape mismatch causes DoS 7.5 Mar 25, 2023 HIGH CVE-2023-25674 TensorFlow: null pointer DoS in RandomShuffle (XLA) 7.5 Mar 25, 2023 HIGH CVE-2023-25673 TensorFlow: FPE in TensorListSplit (XLA) remote DoS 7.5 Mar 25, 2023 HIGH CVE-2023-25672 TensorFlow: NPE in LookupTableImportV2 causes DoS 7.5 Mar 25, 2023 HIGH CVE-2023-25671 TensorFlow: OOB write DoS via integer type mismatch 7.5 Mar 25, 2023 HIGH CVE-2023-25670 TensorFlow: null ptr DoS in quantized MKL MatMul 7.5 Mar 25, 2023 HIGH CVE-2023-25669 TensorFlow: DoS via AvgPoolGrad invalid stride params 7.5 Mar 25, 2023 CRITICAL CVE-2023-25668 TensorFlow: unauthenticated RCE via heap buffer overflow 9.8 Mar 25, 2023 HIGH CVE-2023-25667 TensorFlow: integer overflow DoS in video frame decoding 7.5 Mar 25, 2023 HIGH CVE-2023-25666 TensorFlow: FPE in AudioSpectrogram causes DoS 7.5 Mar 25, 2023 HIGH CVE-2023-25665 TensorFlow: null ptr deref DoS via sparse tensors 7.5 Mar 25, 2023

Showing 1–25 of 438

Frequently asked questions

What is TensorFlow?

TensorFlow is an AI/ML ml libraries tracked by AI Threat Alert for security vulnerabilities in the pip ecosystem.

How many known vulnerabilities does TensorFlow have?

TensorFlow has 438 known CVEs, 18 of them critical, tracked from NVD and GitHub Advisory.

Which ecosystem is TensorFlow distributed in?

TensorFlow is distributed via the pip ecosystem and categorized as ml libraries.

Where does the TensorFlow vulnerability data come from?

Vulnerability data is sourced from NVD and GitHub Advisory, enriched with CVSS, EPSS, exploit signals, and patch status for each CVE.

How do I assess the risk of TensorFlow?

Review each CVE below — every entry shows CVSS severity, EPSS exploit probability, exploitation signals, and whether a patched version is available.

Monitor TensorFlow in your stack

Get instant alerts when new vulnerabilities affect TensorFlow. CISO analysis, ATLAS technique mappings, and compliance reports included.

Start Monitoring