# tensorflow-cpu (PyPI) vulnerabilities Source: https://junglewise.ai/threats/technologies/tensorflow-cpu Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 13 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/technologies/tensorflow-cpu.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 430 vulnerabilities in tensorflow-cpu (PyPI): 0 in the last 7 days and 0 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2023-33976, was published on 13 July 2026. ## Counts - Last 7 days: 0 - Last 30 days: 0 - Last 90 days: 0 - All time: 430 (0 critical, 0 exploited in the wild) ## About tensorflow-cpu (PyPI) Python machine learning framework optimized for CPU-based computations. ## Latest tensorflow-cpu (PyPI) vulnerabilities - [CVE-2023-33976: PYSEC-2026-3331 - TensorFlow has segfault in array_ops.upper_bound](https://junglewise.ai/threats/cve-2023-33976-tensorflow-has-segfault-in-array-ops-upper-bound) (low, CVSS 3.1, published 13 Jul 2026) - [CVE-2023-25661: PYSEC-2026-3182 - TensorFlow Denial of Service vulnerability](https://junglewise.ai/threats/cve-2023-25661-tensorflow-denial-of-service-vulnerability) (low, CVSS 3.1, published 13 Jul 2026) - [CVE-2023-25659: PYSEC-2026-3300 - TensorFlow vulnerable to Out-of-Bounds Read in DynamicStitch](https://junglewise.ai/threats/cve-2023-25659-tensorflow-vulnerable-to-out-of-bounds-read-in-dynamicstitch) (low, CVSS 3.1, published 13 Jul 2026) - [CVE-2023-25660: PYSEC-2026-3362 - TensorFlow vulnerable to seg fault in `tf.raw_ops.Print`](https://junglewise.ai/threats/cve-2023-25660-tensorflow-vulnerable-to-seg-fault-in-tf-raw-ops-print) (low, CVSS 3.1, published 13 Jul 2026) - [CVE-2023-25662: PYSEC-2026-3293 - TensorFlow vulnerable to integer overflow in EditDistance](https://junglewise.ai/threats/cve-2023-25662-tensorflow-vulnerable-to-integer-overflow-in-editdistance) (low, CVSS 3.1, published 13 Jul 2026) - [CVE-2023-25663: PYSEC-2026-3282 - TensorFlow has Null Pointer Error in TensorArrayConcatV2](https://junglewise.ai/threats/cve-2023-25663-tensorflow-has-null-pointer-error-in-tensorarrayconcatv2) (low, CVSS 3.1, published 13 Jul 2026) - [CVE-2023-25664: PYSEC-2026-3122 - TensorFlow has Heap-buffer-overflow in AvgPoolGrad](https://junglewise.ai/threats/cve-2023-25664-tensorflow-has-heap-buffer-overflow-in-avgpoolgrad) (low, CVSS 3.1, published 13 Jul 2026) - [CVE-2023-25665: PYSEC-2026-3276 - TensorFlow has Null Pointer Error in SparseSparseMaximum](https://junglewise.ai/threats/cve-2023-25665-tensorflow-has-null-pointer-error-in-sparsesparsemaximum) (low, CVSS 3.1, published 13 Jul 2026) - [CVE-2023-25666: PYSEC-2026-3317 - TensorFlow has Floating Point Exception in AudioSpectrogram](https://junglewise.ai/threats/cve-2023-25666-tensorflow-has-floating-point-exception-in-audiospectrogram) (low, CVSS 3.1, published 13 Jul 2026) - [CVE-2023-25667: PYSEC-2026-3321 - TensorFlow vulnerable to segfault when opening multiframe gif](https://junglewise.ai/threats/cve-2023-25667-tensorflow-vulnerable-to-segfault-when-opening-multiframe-gif) (low, CVSS 3.1, published 13 Jul 2026) - [CVE-2023-25669: PYSEC-2026-3366 - TensorFlow has Floating Point Exception in AvgPoolGrad with XLA](https://junglewise.ai/threats/cve-2023-25669-tensorflow-has-floating-point-exception-in-avgpoolgrad-with-xla) (low, CVSS 3.1, published 13 Jul 2026) - [CVE-2023-25670: PYSEC-2026-3271 - TensorFlow has Null Pointer Error in QuantizedMatMulWithBiasAndDequantize](https://junglewise.ai/threats/cve-2023-25670-tensorflow-has-null-pointer-error-in) (low, CVSS 3.1, published 13 Jul 2026) - [CVE-2023-25671: PYSEC-2026-3206 - TensorFlow has segmentation fault in tfg-translate](https://junglewise.ai/threats/cve-2023-25671-tensorflow-has-segmentation-fault-in-tfg-translate) (low, CVSS 3.1, published 13 Jul 2026) - [CVE-2022-41909: PYSEC-2026-3368 - Segfault in `CompositeTensorVariantToComponents`](https://junglewise.ai/threats/cve-2022-41909-segfault-in-compositetensorvarianttocomponents) (low, CVSS 3.1, published 13 Jul 2026) - [CVE-2022-41908: PYSEC-2026-3353 - `CHECK` fail via inputs in `PyFunc`](https://junglewise.ai/threats/cve-2022-41908-check-fail-via-inputs-in-pyfunc) (low, CVSS 3.1, published 13 Jul 2026) - [CVE-2022-41900: PYSEC-2026-3383 - FractionalMaxPool and FractionalAVGPool heap out-of-bounds acess](https://junglewise.ai/threats/cve-2022-41900-fractionalmaxpool-and-fractionalavgpool-heap-out-of-bounds-acess) (low, CVSS 3.1, published 13 Jul 2026) - [CVE-2022-41898: PYSEC-2026-3340 - `CHECK` fail via inputs in `SparseFillEmptyRowsGrad`](https://junglewise.ai/threats/cve-2022-41898-check-fail-via-inputs-in-sparsefillemptyrowsgrad) (low, CVSS 3.1, published 13 Jul 2026) - [CVE-2022-41896: PYSEC-2026-3369 - `tf.raw_ops.Mfcc` crashes](https://junglewise.ai/threats/cve-2022-41896-tf-raw-ops-mfcc-crashes) (low, CVSS 3.1, published 13 Jul 2026) - [CVE-2022-41895: PYSEC-2026-3332 - `MirrorPadGrad` heap out of bounds read](https://junglewise.ai/threats/cve-2022-41895-mirrorpadgrad-heap-out-of-bounds-read) (low, CVSS 3.1, published 13 Jul 2026) - [CVE-2022-41890: PYSEC-2026-3333 - `CHECK` fail in `BCast` overflow](https://junglewise.ai/threats/cve-2022-41890-check-fail-in-bcast-overflow) (low, CVSS 3.1, published 13 Jul 2026) - [CVE-2022-41889: PYSEC-2026-3384 - Segfault via invalid attributes in `pywrap_tfe_src.cc`](https://junglewise.ai/threats/cve-2022-41889-segfault-via-invalid-attributes-in-pywrap-tfe-src-cc) (low, CVSS 3.1, published 13 Jul 2026) - [CVE-2022-41884: PYSEC-2026-3345 - Seg fault in `ndarray_tensor_bridge` due to zero and large inputs](https://junglewise.ai/threats/cve-2022-41884-seg-fault-in-ndarray-tensor-bridge-due-to-zero-and-large-inputs) (low, CVSS 3.1, published 13 Jul 2026) - [CVE-2022-41883: PYSEC-2026-3376 - Out of bounds segmentation fault due to unequal op inputs in Tensorflow](https://junglewise.ai/threats/cve-2022-41883-out-of-bounds-segmentation-fault-due-to-unequal-op-inputs-in) (low, CVSS 3.1, published 13 Jul 2026) - [CVE-2022-35983: PYSEC-2026-3349 - TensorFlow vulnerable to `CHECK` fail in `Save` and `SaveSlices`](https://junglewise.ai/threats/cve-2022-35983-tensorflow-vulnerable-to-check-fail-in-save-and-saveslices) (low, CVSS 3.1, published 13 Jul 2026) - [CVE-2022-35984: PYSEC-2026-3355 - TensorFlow vulnerable to `CHECK` fail in `ParameterizedTruncatedNormal`](https://junglewise.ai/threats/cve-2022-35984-tensorflow-vulnerable-to-check-fail-in) (low, CVSS 3.1, published 13 Jul 2026) ## Most severe tensorflow-cpu (PyPI) vulnerabilities - [CVE-2020-15202: Integer truncation in Shard API usage](https://junglewise.ai/threats/cve-2020-15202-integer-truncation-in-shard-api-usage) (low, CVSS 3.1, published 25 Sep 2020) - [CVE-2020-15207: Segfault and data corruption in tensorflow-lite](https://junglewise.ai/threats/cve-2020-15207-segfault-and-data-corruption-in-tensorflow-lite) (low, CVSS 3.1, published 25 Sep 2020) - [CVE-2022-23559: PYSEC-2026-3146 - Integer overflow in TFLite](https://junglewise.ai/threats/cve-2022-23559-integer-overflow-in-tflite) (low, CVSS 3.1, published 9 Jul 2026) - [CVE-2022-23581: PYSEC-2026-3175 - `CHECK`-failures during Grappler's `IsSimplifiableReshape` in Tensorflow](https://junglewise.ai/threats/cve-2022-23581-check-failures-during-grappler-s-issimplifiablereshape-in) (low, CVSS 3.1, published 9 Jul 2026) - [CVE-2022-21728: PYSEC-2026-3121 - Out of bounds read in Tensorflow](https://junglewise.ai/threats/cve-2022-21728-out-of-bounds-read-in-tensorflow) (low, CVSS 3.1, published 9 Jul 2026) - [CVE-2022-23567: PYSEC-2026-3240 - Integer overflows in Tensorflow](https://junglewise.ai/threats/cve-2022-23567-integer-overflows-in-tensorflow) (low, CVSS 3.1, published 9 Jul 2026) - [CVE-2022-23589: PYSEC-2026-3154 - Null pointer dereference in Grappler's `IsConstant`](https://junglewise.ai/threats/cve-2022-23589-null-pointer-dereference-in-grappler-s-isconstant) (low, CVSS 3.1, published 9 Jul 2026) - [CVE-2020-15194: Denial of Service in Tensorflow](https://junglewise.ai/threats/cve-2020-15194-denial-of-service-in-tensorflow) (low, CVSS 3.1, published 25 Sep 2020) - [CVE-2020-15205: Data leak in Tensorflow](https://junglewise.ai/threats/cve-2020-15205-data-leak-in-tensorflow) (low, CVSS 3.1, published 25 Sep 2020) - [CVE-2022-23570: PYSEC-2026-3153 - Null-dereference in Tensorflow](https://junglewise.ai/threats/cve-2022-23570-null-dereference-in-tensorflow) (low, CVSS 3.1, published 9 Jul 2026) ## Vulnerabilities per week Nothing was published in the last eight weeks. | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 0 | 0 | 0 | | 24 Aug 2026 | 0 | 0 | 0 | | 31 Aug 2026 | 0 | 0 | 0 | | 7 Sep 2026 | 0 | 0 | 0 | | 14 Sep 2026 | 0 | 0 | 0 | | 21 Sep 2026 | 0 | 0 | 0 | | 28 Sep 2026 | 0 | 0 | 0 | | 5 Oct 2026 | 0 | 0 | 0 | | 12 Oct 2026 | 0 | 0 | 0 | | 19 Oct 2026 | 0 | 0 | 0 | | 26 Oct 2026 | 0 | 0 | 0 | | 2 Nov 2026 | 0 | 0 | 0 | | 9 Nov 2026 | 0 | 0 | 0 | ## Other PyPI technologies - [tensorflow (PyPI)](https://junglewise.ai/threats/technologies/pypi-tensorflow): 435 vulnerabilities - [tensorflow-gpu (PyPI)](https://junglewise.ai/threats/technologies/tensorflow-gpu): 427 vulnerabilities - [open-webui (PyPI)](https://junglewise.ai/threats/technologies/open-webui): 177 vulnerabilities - [Django (PyPI)](https://junglewise.ai/threats/technologies/django): 173 vulnerabilities - [apache-airflow (PyPI)](https://junglewise.ai/threats/technologies/apache-airflow): 159 vulnerabilities - [pillow (PyPI)](https://junglewise.ai/threats/technologies/pillow): 125 vulnerabilities - [praisonai (PyPI)](https://junglewise.ai/threats/technologies/pypi-praisonai): 120 vulnerabilities - [vllm (PyPI)](https://junglewise.ai/threats/technologies/pypi-vllm): 117 vulnerabilities - [plone (PyPI)](https://junglewise.ai/threats/technologies/pypi-plone): 101 vulnerabilities - [mlflow (PyPI)](https://junglewise.ai/threats/technologies/mlflow): 88 vulnerabilities - [picklescan (PyPI)](https://junglewise.ai/threats/technologies/picklescan): 86 vulnerabilities - [exiv2 (PyPI)](https://junglewise.ai/threats/technologies/exiv2): 85 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "tensorflow-cpu (PyPI) vulnerabilities", https://junglewise.ai/threats/technologies/tensorflow-cpu, 13 November 2026.