PyPI/tensorflow-gpu CVE-2020-15198: medium 5.4, EPSS 0.54%

Heap buffer overflow in Tensorflow

Action: Upgrade tensorflow-gpu to 2.3.1 or later.

pip install tensorflow-gpu==2.3.1

Affected

Fixed versions

Sources

• osv: GHSA-jc87-6vpp-7ff3#PyPI/tensorflow-gpu
• https://github.com/tensorflow/tensorflow/security/advisories/GHSA-jc87-6vpp-7ff3
• https://nvd.nist.gov/vuln/detail/CVE-2020-15198
• https://github.com/tensorflow/tensorflow/commit/3cbb917b4714766030b28eba9fb41bb97ce9ee02
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2020-278.yaml
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2020-313.yaml
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2020-121.yaml
• https://github.com/tensorflow/tensorflow
• https://github.com/tensorflow/tensorflow/releases/tag/v2.3.1

CVE-2020-15198 · published 2020-09-25T18:28:22Z · modified 2026-09-10T03:49:25.846176475Z · JSON