CVE-2020-26267

6 advisories.

PyPI/tensorflow CVE-2020-26267: medium 4.4, EPSS 0.24%

Lack of validation in data format attributes in TensorFlow

Action: Upgrade tensorflow to 1.15.5 or later.

pip install tensorflow==1.15.5

pip install tensorflow==2.0.4

pip install tensorflow==2.1.3

pip install tensorflow==2.2.2

pip install tensorflow==2.3.2

Affected

introduced	fixed	last affected
0	1.15.5	-
2.0.0	2.0.4	-
2.1.0	2.1.3	-
2.2.0	2.2.2	-
2.3.0	2.3.2	-

Fixed versions

1.15.5

2.0.4

2.1.3

2.2.2

2.3.2

Sources

CVE-2020-26267 · published 2020-12-10T19:07:26Z · modified 2026-09-10T03:49:00.769495149Z · JSON

PyPI/tensorflow-cpu CVE-2020-26267: medium 4.4, EPSS 0.24%

Lack of validation in data format attributes in TensorFlow

Action: Upgrade tensorflow-cpu to 1.15.5 or later.

pip install tensorflow-cpu==1.15.5

pip install tensorflow-cpu==2.0.4

pip install tensorflow-cpu==2.1.3

pip install tensorflow-cpu==2.2.2

pip install tensorflow-cpu==2.3.2

Affected

introduced	fixed	last affected
0	1.15.5	-
2.0.0	2.0.4	-
2.1.0	2.1.3	-
2.2.0	2.2.2	-
2.3.0	2.3.2	-

Fixed versions

1.15.5

2.0.4

2.1.3

2.2.2

2.3.2

Sources

CVE-2020-26267 · published 2020-12-10T19:07:26Z · modified 2026-09-10T03:49:00.769495149Z · JSON

PyPI/tensorflow-gpu CVE-2020-26267: medium 4.4, EPSS 0.24%

Lack of validation in data format attributes in TensorFlow

Action: Upgrade tensorflow-gpu to 1.15.5 or later.

pip install tensorflow-gpu==1.15.5

pip install tensorflow-gpu==2.0.4

pip install tensorflow-gpu==2.1.3

pip install tensorflow-gpu==2.2.2

pip install tensorflow-gpu==2.3.2

Affected

introduced	fixed	last affected
0	1.15.5	-
2.0.0	2.0.4	-
2.1.0	2.1.3	-
2.2.0	2.2.2	-
2.3.0	2.3.2	-

Fixed versions

1.15.5

2.0.4

2.1.3

2.2.2

2.3.2

Sources

CVE-2020-26267 · published 2020-12-10T19:07:26Z · modified 2026-09-10T03:49:00.769495149Z · JSON

PyPI/tensorflow CVE-2020-26267: unknown, EPSS 0.24%

In affected versions of TensorFlow the tf.raw_ops.DataFormatVecPermute API does not validate the src_format and dst_format attributes. The code assumes that these two arguments define a permutation of

Action: Upgrade tensorflow to 1.15.5 or later.

pip install tensorflow==1.15.5

pip install tensorflow==2.0.4

pip install tensorflow==2.1.3

pip install tensorflow==2.2.2

pip install tensorflow==2.3.2

Affected

introduced	fixed	last affected
0	1.15.5	-
2.0.0	2.0.4	-
2.1.0	2.1.3	-
2.2.0	2.2.2	-
2.3.0	2.3.2	-

Fixed versions

1.15.5

2.0.4

2.1.3

2.2.2

2.3.2

Sources

CVE-2020-26267 · published 2020-12-10T23:15:00Z · modified 2023-12-06T01:00:27.687951Z · JSON

PyPI/tensorflow-cpu CVE-2020-26267: unknown, EPSS 0.24%

Action: Upgrade tensorflow-cpu to 1.15.5 or later.

pip install tensorflow-cpu==1.15.5

pip install tensorflow-cpu==2.0.4

pip install tensorflow-cpu==2.1.3

pip install tensorflow-cpu==2.2.2

pip install tensorflow-cpu==2.3.2

Affected

introduced	fixed	last affected
0	1.15.5	-
2.0.0	2.0.4	-
2.1.0	2.1.3	-
2.2.0	2.2.2	-
2.3.0	2.3.2	-

Fixed versions

1.15.5

2.0.4

2.1.3

2.2.2

2.3.2

Sources

CVE-2020-26267 · published 2020-12-10T23:15:00Z · modified 2023-12-06T01:00:27.687951Z · JSON

PyPI/tensorflow-gpu CVE-2020-26267: unknown, EPSS 0.24%

Action: Upgrade tensorflow-gpu to 1.15.5 or later.

pip install tensorflow-gpu==1.15.5

pip install tensorflow-gpu==2.0.4

pip install tensorflow-gpu==2.1.3

pip install tensorflow-gpu==2.2.2

pip install tensorflow-gpu==2.3.2

Affected

introduced	fixed	last affected
0	1.15.5	-
2.0.0	2.0.4	-
2.1.0	2.1.3	-
2.2.0	2.2.2	-
2.3.0	2.3.2	-

Fixed versions

1.15.5

2.0.4

2.1.3

2.2.2

2.3.2

Sources

CVE-2020-26267 · published 2020-12-10T23:15:00Z · modified 2023-12-06T01:00:27.687951Z · JSON