CVE-2020-15210

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2020-15210
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-15210.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2020-15210
Aliases
Downstream
Related
Published
2020-09-25T19:15:16Z
Modified
2026-10-20T14:10:58Z
Severity
  • 6.5 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H CVSS Calculator
Summary
[none]
Details

In tensorflow-lite before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1, if a TFLite saved model uses the same tensor as both input and output of an operator, then, depending on the operator, we can observe a segmentation fault or just memory corruption. We have patched the issue in d58c96946b and will release patch releases for all versions between 1.15 and 2.3. We recommend users to upgrade to TensorFlow 1.15.4, 2.0.3, 2.1.2, 2.2.1, or 2.3.1.

Database specific 
{
    "unresolved_ranges":  [
        {
            "cpes":  [
                "cpe:2.3:o:opensuse:leap:15.2:*:*:*:*:*:*:*"
            ],
            "extracted_events":  [
                {
                    "range":  [
                        {
                            "introduced":  "15.2"
                        },
                        {
                            "last_affected":  "15.2"
                        }
                    ],
                    "source":  "CPE_STRING"
                }
            ],
            "vendor_product":  "opensuse:leap"
        }
    ]
}
References

Affected packages

Git / github.com/tensorflow/tensorflow

Affected ranges

Type
GIT
Repo
https://github.com/tensorflow/tensorflow
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
df8c55ce12b5cfc6f29b01889f7773911a75e6ef
Introduced
64c3d382cadf7bbe8e7e99884bede8284ff67f56
Fixed
295ad2781683835be974faba0a191528d8079768
Introduced
e5bf8de410005de06a7ff5393fafdf832ef1d4ad
Fixed
ab35f2bf7132f9d20a0bea9a5d1849862737d4b4
Introduced
2b96f3662bd776e277f86997659e61046b56c315
Fixed
25fba035f3e453d94490932096282c7b0624bbb3
Introduced
b36436b087bd8e8701ef51718179037cccdfc26e
Fixed
fcc4b966f1265f466e82617020af93670141b009
Fixed
d58c96946b2880991d63d1dacacb32f0a4dfa453
Database specific
Show details 
{
    "extracted_events":  [
        {
            "cpe":  "cpe:2.3:a:google:tensorflow:*:*:*:*:lite:*:*:*",
            "range":  [
                {
                    "introduced":  "0"
                },
                {
                    "fixed":  "1.15.4"
                }
            ],
            "source":  "CPE_RANGE"
        },
        {
            "cpe":  "cpe:2.3:a:google:tensorflow:*:*:*:*:lite:*:*:*",
            "range":  [
                {
                    "introduced":  "2.0.0"
                },
                {
                    "fixed":  "2.0.3"
                }
            ],
            "source":  "CPE_RANGE"
        },
        {
            "cpe":  "cpe:2.3:a:google:tensorflow:*:*:*:*:lite:*:*:*",
            "range":  [
                {
                    "introduced":  "2.1.0"
                },
                {
                    "fixed":  "2.1.2"
                }
            ],
            "source":  "CPE_RANGE"
        },
        {
            "cpe":  "cpe:2.3:a:google:tensorflow:*:*:*:*:lite:*:*:*",
            "range":  [
                {
                    "introduced":  "2.2.0"
                },
                {
                    "fixed":  "2.2.1"
                }
            ],
            "source":  "CPE_RANGE"
        },
        {
            "cpe":  "cpe:2.3:a:google:tensorflow:*:*:*:*:lite:*:*:*",
            "range":  [
                {
                    "introduced":  "2.3.0"
                },
                {
                    "fixed":  "2.3.1"
                }
            ],
            "source":  "CPE_RANGE"
        },
        {
            "range":  [
                {
                    "fixed":  "d58c96946b2880991d63d1dacacb32f0a4dfa453"
                }
            ],
            "source":  "REFERENCES_COMMIT"
        },
        {
            "original_tag":  "v2.3.1",
            "range":  [
                {
                    "fixed":  "fcc4b966f1265f466e82617020af93670141b009"
                }
            ],
            "source":  "REFERENCES_TAG"
        }
    ]
}

Affected versions

0.*
0.5.0
0.6.0
v1.*
v1.1.0-rc1
v1.1.0-rc2
v1.12.1
v1.15.0
v1.15.0-rc0
v1.15.0-rc1
v1.15.0-rc2
v1.15.0-rc3
v1.15.2
v1.15.3
v1.6.0-rc1
v1.9.0-rc2
v2.*
v2.0.0
v2.0.1
v2.0.2
v2.1.0
v2.1.1
v2.2.0
v2.3.0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-15210.json"
vanir_signatures 
[
    {
        "deprecated":  false,
        "digest":  {
            "function_hash":  "271499100640199661187945076113145677825",
            "length":  1768
        },
        "id":  "CVE-2020-15210-1a270a8f",
        "signature_type":  "Function",
        "signature_version":  "v1",
        "source":  "https://github.com/tensorflow/tensorflow/commit/d58c96946b2880991d63d1dacacb32f0a4dfa453",
        "target":  {
            "file":  "tensorflow/lite/core/subgraph.cc",
            "function":  "Subgraph::AddNodeWithParameters"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "line_hashes":  [
                "223430552221354511089063070085818374467",
                "16921978511952566327535291651336745010",
                "234663808337529557859834212304646738555"
            ],
            "threshold":  0.9
        },
        "id":  "CVE-2020-15210-77c1c30b",
        "signature_type":  "Line",
        "signature_version":  "v1",
        "source":  "https://github.com/tensorflow/tensorflow/commit/d58c96946b2880991d63d1dacacb32f0a4dfa453",
        "target":  {
            "file":  "tensorflow/lite/model_test.cc"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "line_hashes":  [
                "205435682110525021304340706187361747346",
                "218525562072316164906181765876475931025",
                "206181148045709910831354288205920019401",
                "80499690413841514969529199666071100925",
                "31644574748737310766687022137205258206",
                "126560539008428497682787409249895600598"
            ],
            "threshold":  0.9
        },
        "id":  "CVE-2020-15210-7887a2ee",
        "signature_type":  "Line",
        "signature_version":  "v1",
        "source":  "https://github.com/tensorflow/tensorflow/commit/d58c96946b2880991d63d1dacacb32f0a4dfa453",
        "target":  {
            "file":  "tensorflow/lite/core/subgraph.cc"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "line_hashes":  [
                "260485882208232690573024683960352476035",
                "171878699289669915931288448196082696729",
                "234955203438120151219278028179414602281"
            ],
            "threshold":  0.9
        },
        "id":  "CVE-2020-15210-8d85dbd8",
        "signature_type":  "Line",
        "signature_version":  "v1",
        "source":  "https://github.com/tensorflow/tensorflow/commit/d58c96946b2880991d63d1dacacb32f0a4dfa453",
        "target":  {
            "file":  "tensorflow/lite/core/subgraph.h"
        }
    }
]
vanir_signatures_modified 
"2026-10-20T14:10:58Z"