Medium severity6.5NVD Advisory· Published Sep 25, 2020· Updated Jun 17, 2026
CVE-2020-15210
CVE-2020-15210
Description
In tensorflow-lite before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1, if a TFLite saved model uses the same tensor as both input and output of an operator, then, depending on the operator, we can observe a segmentation fault or just memory corruption. We have patched the issue in d58c96946b and will release patch releases for all versions between 1.15 and 2.3. We recommend users to upgrade to TensorFlow 1.15.4, 2.0.3, 2.1.2, 2.2.1, or 2.3.1.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
tensorflowPyPI | < 1.15.4 | 1.15.4 |
tensorflowPyPI | >= 2.0.0, < 2.0.3 | 2.0.3 |
tensorflowPyPI | >= 2.1.0, < 2.1.2 | 2.1.2 |
tensorflowPyPI | >= 2.2.0, < 2.2.1 | 2.2.1 |
tensorflowPyPI | >= 2.3.0, < 2.3.1 | 2.3.1 |
tensorflow-cpuPyPI | < 1.15.4 | 1.15.4 |
tensorflow-cpuPyPI | >= 2.0.0, < 2.0.3 | 2.0.3 |
tensorflow-cpuPyPI | >= 2.1.0, < 2.1.2 | 2.1.2 |
tensorflow-cpuPyPI | >= 2.2.0, < 2.2.1 | 2.2.1 |
tensorflow-gpuPyPI | < 1.15.4 | 1.15.4 |
tensorflow-gpuPyPI | >= 2.0.0, < 2.0.3 | 2.0.3 |
tensorflow-gpuPyPI | >= 2.1.0, < 2.1.2 | 2.1.2 |
tensorflow-gpuPyPI | >= 2.2.0, < 2.2.1 | 2.2.1 |
tensorflow-cpuPyPI | >= 2.3.0, < 2.3.1 | 2.3.1 |
tensorflow-gpuPyPI | >= 2.3.0, < 2.3.1 | 2.3.1 |
Affected products
11- osv-coords8 versionspkg:bitnami/tensorflowpkg:pypi/tensorflowpkg:pypi/tensorflow-cpupkg:pypi/tensorflow-gpupkg:rpm/opensuse/tensorflow2&distro=openSUSE%20Leap%2015.2pkg:rpm/opensuse/tensorflow2-lite&distro=openSUSE%20Leap%2015.2pkg:rpm/opensuse/tensorflow2_2_1_2-gnu-hpc&distro=openSUSE%20Leap%2015.2pkg:rpm/opensuse/tensorflow2_2_1_2-gnu-openmpi2-hpc&distro=openSUSE%20Leap%2015.2
< 1.15.4+ 7 more
- (no CPE)range: < 1.15.4
- (no CPE)range: < 1.15.4
- (no CPE)range: < 1.15.4
- (no CPE)range: < 1.15.4
- (no CPE)range: < 2.1.2-lp152.7.3.1
- (no CPE)range: < 2.1.2-lp152.7.3.1
- (no CPE)range: < 2.1.2-lp152.7.3.1
- (no CPE)range: < 2.1.2-lp152.7.3.1
- Range: < 1.15.4
Patches
Vulnerability mechanics
References
14- github.com/tensorflow/tensorflow/commit/d58c96946b2880991d63d1dacacb32f0a4dfa453nvdPatchThird Party AdvisoryWEB
- github.com/tensorflow/tensorflow/security/advisories/GHSA-x9j7-x98r-r4w2nvdExploitThird Party AdvisoryWEB
- lists.opensuse.org/opensuse-security-announce/2020-10/msg00065.htmlnvdMailing ListThird Party AdvisoryWEB
- github.com/advisories/GHSA-x9j7-x98r-r4w2ghsaADVISORY
- github.com/tensorflow/tensorflow/releases/tag/v2.3.1nvdThird Party AdvisoryWEB
- nvd.nist.gov/vuln/detail/CVE-2020-15210ghsaADVISORY
- github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2020-290.yamlghsaWEB
- github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2020-325.yamlghsaWEB
- github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2020-133.yamlghsaWEB
- github.com/tensorflow/tensorflow/commit/094329d0dcb8290bed2b1ee420934971f422c86dghsaWEB
- github.com/tensorflow/tensorflow/commit/1c8709b437fec10875b0cf271889afec9bbf582eghsaWEB
- github.com/tensorflow/tensorflow/commit/8c2092e9f9ef78b3f9060f8bf5ce7a49d1ccdc8fghsaWEB
- github.com/tensorflow/tensorflow/commit/f4159ccef23d11eb58ee4263beaaeac1be3343c7ghsaWEB
- github.com/tensorflow/tensorflow/commit/f50a14b00560a383865c2273e4a9094add3888d5ghsaWEB
News mentions
0No linked articles in our index yet.