PyPI/tensorflow-cpu CVE-2020-15196: high 8.5, EPSS 0.91%

Heap buffer overflow in Tensorflow

Action: Upgrade tensorflow-cpu to 2.3.1 or later.

pip install tensorflow-cpu==2.3.1

Affected

Fixed versions

Sources

• osv: GHSA-pg59-2f92-5cph#PyPI/tensorflow-cpu
• https://github.com/tensorflow/tensorflow/security/advisories/GHSA-pg59-2f92-5cph
• https://nvd.nist.gov/vuln/detail/CVE-2020-15196
• https://github.com/tensorflow/tensorflow/commit/3cbb917b4714766030b28eba9fb41bb97ce9ee02
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2020-276.yaml
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2020-311.yaml
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2020-119.yaml
• https://github.com/tensorflow/tensorflow
• https://github.com/tensorflow/tensorflow/releases/tag/v2.3.1

CVE-2020-15196 · published 2020-09-25T18:28:21Z · modified 2026-07-08T05:59:38.146188695Z · JSON