PYSEC-2026-3290

See a problem?
Import Source
https://github.com/pypa/advisory-database/blob/main/vulns/tensorflow-cpu/PYSEC-2026-3290.yaml
JSON Data
https://api.osv.dev/v1/vulns/PYSEC-2026-3290
Aliases
Published
2026-07-13T14:19:51Z
Modified
2026-07-13T16:42:44Z
Severity
  • 4.8 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H CVSS Calculator
Summary
Overflow in `FusedResizeAndPadConv2D`
Details

Impact

When tf.raw_ops.FusedResizeAndPadConv2D is given a large tensor shape, it overflows.

import tensorflow as tf

mode = "REFLECT"
strides = [1, 1, 1, 1]
padding = "SAME"
resize_align_corners = False
input = tf.constant(147, shape=[3,3,1,1], dtype=tf.float16)
size = tf.constant([1879048192,1879048192], shape=[2], dtype=tf.int32)
paddings = tf.constant([3,4], shape=[2], dtype=tf.int32)
filter = tf.constant(123, shape=[1,3,4,1], dtype=tf.float16)
tf.raw_ops.FusedResizeAndPadConv2D(input=input, size=size, paddings=paddings, filter=filter, mode=mode, strides=strides, padding=padding, resize_align_corners=resize_align_corners)

Patches

We have patched the issue in GitHub commit d66e1d568275e6a2947de97dca7a102a211e01ce.

The fix will be included in TensorFlow 2.11. We will also cherrypick this commit on TensorFlow 2.10.1, 2.9.3, and TensorFlow 2.8.4, as these are also affected and still in supported range.

For more information

Please consult our security guide for more information regarding the security model and how to contact us with issues and questions.

Attribution

This vulnerability has been reported by Neophytos Christou from the Secure Systems Lab (SSL) at Brown University.

References

Affected packages

PyPI / tensorflow-cpu

Package

Name
tensorflow-cpu
View open source insights on deps.dev
Purl
pkg:pypi/tensorflow-cpu

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.7.4
Introduced
2.8.0
Fixed
2.8.1
Introduced
2.9.0
Fixed
2.9.1

Affected versions

1.*
1.15.0
2.*
2.1.0
2.1.1
2.1.2
2.1.3
2.1.4
2.2.0
2.2.1
2.2.2
2.2.3
2.3.0
2.3.1
2.3.2
2.3.3
2.3.4
2.4.0
2.4.1
2.4.2
2.4.3
2.4.4
2.5.0
2.5.1
2.5.2
2.5.3
2.6.0
2.6.1
2.6.2
2.6.3
2.6.4
2.6.5
2.7.0
2.7.1
2.7.2
2.7.3
2.8.0
2.9.0

Database specific

source 
"https://github.com/pypa/advisory-database/blob/main/vulns/tensorflow-cpu/PYSEC-2026-3290.yaml"