AI Threat Alert

TensorFlow Vulnerabilities

pip ML Libraries

AI Threat Alert tracks 438 known vulnerabilities in TensorFlow, 18 rated critical — an AI/ML ml libraries in the pip ecosystem. Each CVE includes CVSS severity, EPSS exploit probability, patch status, and CISO-grade analysis.

Data sources

67

Risk Score

438

Total CVEs

18

Critical

pip

Ecosystem

Aug 10, 2026

Last CVE

4%

Patch Rate

1372d

Avg Time to Patch

200,483 stars 77,655 forks 3,351 issues 3,410 dependents Last push Sep 27, 2026

OpenSSF Scorecard 7.5/10

Known Vulnerabilities (438 total, page 15 of 18)

Severity CVE ID Summary CVSS Published

MEDIUM CVE-2021-29557 TensorFlow: FPE in SparseMatMul causes process DoS 5.5 May 14, 2021 MEDIUM CVE-2021-29556 TensorFlow: DoS via divide-by-zero in Reverse op 5.5 May 14, 2021 MEDIUM CVE-2021-29555 TensorFlow: FusedBatchNorm divide-by-zero crashes ML jobs 5.5 May 14, 2021 HIGH CVE-2021-29553 TensorFlow: heap OOB read via malicious axis in quant op 7.1 May 14, 2021 MEDIUM CVE-2021-29552 TensorFlow: DoS via empty num_segments tensor assertion 5.5 May 14, 2021 MEDIUM CVE-2021-29551 TensorFlow: OOB read DoS in MatrixTriangularSolve kernel 5.5 May 14, 2021 MEDIUM CVE-2021-29550 TensorFlow: FractionalAvgPool DoS via divide-by-zero 5.5 May 14, 2021 MEDIUM CVE-2021-29549 TensorFlow: divide-by-zero DoS in quantized batch norm op 5.5 May 14, 2021 MEDIUM CVE-2021-29548 TensorFlow: DoS via division by zero in QuantizedBatchNorm 5.5 May 14, 2021 MEDIUM CVE-2021-29547 TensorFlow: OOB read DoS via empty tensor in QuantizedBatchNorm 5.5 May 14, 2021 HIGH CVE-2021-29546 TensorFlow: div-by-zero in QuantizedBiasAdd, C/I/A high 7.8 May 14, 2021 MEDIUM CVE-2021-29545 TensorFlow: heap OOB write in sparse tensor DoS 5.5 May 14, 2021 MEDIUM CVE-2021-29544 TensorFlow: DoS via missing tensor rank validation 5.5 May 14, 2021 MEDIUM CVE-2021-29543 TensorFlow: DoS via assertion fail in CTCGreedyDecoder 5.5 May 14, 2021 MEDIUM CVE-2021-29542 TensorFlow: StringNGrams heap overflow crashes ML process 5.5 May 14, 2021 MEDIUM CVE-2021-29541 TensorFlow: null ptr deref DoS in StringNGrams op 5.5 May 14, 2021 HIGH CVE-2021-29540 TensorFlow: heap buffer overflow in Conv2D gradient op 7.8 May 14, 2021 MEDIUM CVE-2021-29539 TensorFlow: type confusion in ImmutableConst causes DoS 5.5 May 14, 2021 MEDIUM CVE-2021-29538 TensorFlow: div-by-zero DoS in Conv2DBackpropFilter 5.5 May 14, 2021 HIGH CVE-2021-29537 TensorFlow: heap overflow in QuantizedResizeBilinear op 7.8 May 14, 2021 HIGH CVE-2021-29536 TensorFlow: heap overflow in QuantizedReshape op 7.8 May 14, 2021 HIGH CVE-2021-29535 TensorFlow: heap overflow in QuantizedMul op 7.8 May 14, 2021 MEDIUM CVE-2021-29534 TensorFlow: DoS via CHECK-fail in SparseConcat op 5.5 May 14, 2021 MEDIUM CVE-2021-29533 TensorFlow: DoS via empty image in DrawBoundingBoxes 5.5 May 14, 2021 HIGH CVE-2021-29532 TensorFlow: heap OOB read via RaggedCross op 7.1 May 14, 2021

Showing 351–375 of 438

← Previous Next →

Frequently asked questions

What is TensorFlow?

TensorFlow is an AI/ML ml libraries tracked by AI Threat Alert for security vulnerabilities in the pip ecosystem.

How many known vulnerabilities does TensorFlow have?

TensorFlow has 438 known CVEs, 18 of them critical, tracked from NVD and GitHub Advisory.

Which ecosystem is TensorFlow distributed in?

TensorFlow is distributed via the pip ecosystem and categorized as ml libraries.

Where does the TensorFlow vulnerability data come from?

Vulnerability data is sourced from NVD and GitHub Advisory, enriched with CVSS, EPSS, exploit signals, and patch status for each CVE.

How do I assess the risk of TensorFlow?

Review each CVE below — every entry shows CVSS severity, EPSS exploit probability, exploitation signals, and whether a patched version is available.

Monitor TensorFlow in your stack

Get instant alerts when new vulnerabilities affect TensorFlow. CISO analysis, ATLAS technique mappings, and compliance reports included.

Start Monitoring