PyPI/tensorflow-gpu CVE-2020-15266: low 3.7, EPSS 0.94%

Float cast overflow undefined behavior

Action: Upgrade tensorflow-gpu to 2.4.0 or later.

pip install tensorflow-gpu==2.4.0

Affected

Fixed versions

Sources

• osv: GHSA-xwhf-g6j5-j5gc#PyPI/tensorflow-gpu
• https://github.com/tensorflow/tensorflow/security/advisories/GHSA-xwhf-g6j5-j5gc
• https://nvd.nist.gov/vuln/detail/CVE-2020-15266
• https://github.com/tensorflow/tensorflow/issues/42129
• https://github.com/tensorflow/tensorflow/pull/42143/commits/3ade2efec2e90c6237de32a19680caaa3ebc2845
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2020-296.yaml
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2020-331.yaml
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2020-139.yaml
• https://github.com/tensorflow/tensorflow

CVE-2020-15266 · published 2020-11-13T17:18:29Z · modified 2026-07-08T06:00:37.840609805Z · JSON