CVE-2020-15192

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2020-15192
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-15192.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2020-15192
Aliases
Downstream
Related
Published
2020-09-25T19:15:14.480Z
Modified
2026-07-09T11:34:37.502552Z
Severity
  • 4.3 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L CVSS Calculator
Summary
[none]
Details

In Tensorflow before versions 2.2.1 and 2.3.1, if a user passes a list of strings to dlpack.to_dlpack there is a memory leak following an expected validation failure. The issue occurs because the status argument during validation failures is not properly checked. Since each of the above methods can return an error status, the status value must be checked before continuing. The issue is patched in commit 22e07fb204386768e5bcbea563641ea11f96ceb8 and is released in TensorFlow versions 2.2.1, or 2.3.1.

Database specific 
{
    "unresolved_ranges": [
        {
            "extracted_events": [
                {
                    "introduced": "15.2"
                },
                {
                    "last_affected": "15.2"
                }
            ],
            "cpes": [
                "cpe:2.3:o:opensuse:leap:15.2:*:*:*:*:*:*:*"
            ],
            "source": "CPE_STRING",
            "vendor_product": "opensuse:leap"
        }
    ]
}
References

Affected packages

Git / github.com/tensorflow/tensorflow

Affected ranges

Type
GIT
Repo
https://github.com/tensorflow/tensorflow
Events
Introduced
2b96f3662bd776e277f86997659e61046b56c315
Last affected
b36436b087bd8e8701ef51718179037cccdfc26e
Fixed
22e07fb204386768e5bcbea563641ea11f96ceb8
Fixed
fcc4b966f1265f466e82617020af93670141b009
Database specific 
{
    "cpe": [
        "cpe:2.3:a:google:tensorflow:2.2.0:*:*:*:-:*:*:*",
        "cpe:2.3:a:google:tensorflow:2.3.0:*:*:*:-:*:*:*"
    ],
    "extracted_events": [
        {
            "introduced": "2.2.0"
        },
        {
            "last_affected": "2.2.0"
        },
        {
            "introduced": "2.3.0"
        },
        {
            "last_affected": "2.3.0"
        }
    ],
    "source": [
        "CPE_STRING",
        "REFERENCES"
    ]
}

Affected versions

2.*
2.2.0
2.3.0

Database specific

vanir_signatures_modified 
"2026-07-09T11:34:37Z"
vanir_signatures 
[
    {
        "signature_type": "Function",
        "deprecated": false,
        "digest": {
            "length": 1068.0,
            "function_hash": "302909230814631908500873842520316055001"
        },
        "signature_version": "v1",
        "source": "https://github.com/tensorflow/tensorflow/commit/22e07fb204386768e5bcbea563641ea11f96ceb8",
        "id": "CVE-2020-15192-28b47c62",
        "target": {
            "function": "TFE_HandleToDLPack",
            "file": "tensorflow/c/eager/dlpack.cc"
        }
    },
    {
        "signature_type": "Function",
        "deprecated": false,
        "digest": {
            "length": 40733.0,
            "function_hash": "24753109135250677179816536229137657275"
        },
        "signature_version": "v1",
        "source": "https://github.com/tensorflow/tensorflow/commit/22e07fb204386768e5bcbea563641ea11f96ceb8",
        "id": "CVE-2020-15192-5c62b918",
        "target": {
            "function": "PYBIND11_MODULE",
            "file": "tensorflow/python/tfe_wrapper.cc"
        }
    },
    {
        "signature_type": "Line",
        "deprecated": false,
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "203184394093938566735101442339476286402",
                "5057783822461729014686159011822875566",
                "276337694304556640652692797546760300494",
                "324519683375647210480153687631467865768",
                "150394200301454229501015301415659583403",
                "193926713344694573779654214522808465940"
            ]
        },
        "signature_version": "v1",
        "source": "https://github.com/tensorflow/tensorflow/commit/22e07fb204386768e5bcbea563641ea11f96ceb8",
        "id": "CVE-2020-15192-61b62625",
        "target": {
            "file": "tensorflow/python/tfe_wrapper.cc"
        }
    },
    {
        "signature_type": "Line",
        "deprecated": false,
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "292945338278192546795872999715438919692",
                "8499956686667079679287218720624198012",
                "307114024074474464007071230750556435264",
                "328636996453833581469835052556533486484",
                "330074296641229322375849268324042839247",
                "297098567421169699229427655622528681499",
                "5005939368759929207605833461930312587",
                "71125840436849761506943478301431655003",
                "188619440248625237133937985021060796580",
                "238407969739438406160217647691629800386",
                "270117986294955159119535060630390044808",
                "195004349352804827391322080325011119731",
                "141444573330419127191167987337461451144",
                "150569583603784431261765181427430532486",
                "153618812154243453255623643549632453896",
                "48503017837638972005747806247883235751",
                "132225355395750670746629296731937542309",
                "96071311886532311406221375120395617570",
                "105512974983660108519637253708194445101",
                "78023981141124778261323221962248709649",
                "291525630689812036460554464906136495752",
                "200733148512573282717005722123763233839"
            ]
        },
        "signature_version": "v1",
        "source": "https://github.com/tensorflow/tensorflow/commit/22e07fb204386768e5bcbea563641ea11f96ceb8",
        "id": "CVE-2020-15192-ba7f858a",
        "target": {
            "file": "tensorflow/c/eager/dlpack.cc"
        }
    }
]
source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-15192.json"