Detections
Analytics
SCA: security update for tensorflow, tensorflow-cpu, tensorflow-gpu (GHSA-qh32-6jjc-qprm)
high Tenable Cloud Security Plugin ID 418133
Description
There are packages installed that are affected by a vulnerability referenced in the following CVE:- In tensorflow-lite before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1, a crafted TFLite model can force
a node to have as input a tensor backed by a `nullptr` buffer. This can be achieved by changing a buffer
index in the flatbuffer serialization to convert a read-only tensor to a read-write one. The runtime
assumes that these buffers are written to before a possible read, hence they are initialized with
`nullptr`. However, by changing the buffer index for a tensor and implicitly converting that tensor to be
a read-write one, as there is nothing in the model that writes to it, we get a null pointer dereference.
The issue is patched in commit 0b5662bc, and is released in TensorFlow versions 1.15.4, 2.0.3, 2.1.2,
2.2.1, or 2.3.1. (CVE-2020-15209)
See Also
Plugin Details
Severity: High
ID: 418133
Version: Revision 1.6
Type: Local
Family: SCA Checks
Published: 1/23/2025
Updated: 7/2/2026
Supported Sensors: Tenable Cloud Security, Tenable Self-Hosted Container Security
Risk Information
VPR
Risk Factor: Low
Score: 3
Percentile: 23.18
Vendor
Vendor Severity: High
CVSS v2
Risk Factor: Medium
Base Score: 4.3
Temporal Score: 3.4
Vector: CVSS2#AV:N/AC:M/Au:N/C:N/I:N/A:P
CVSS Score Source: CVE-2020-15209
CVSS v3
Risk Factor: Medium
Base Score: 5.9
Temporal Score: 5.3
Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Temporal Vector: CVSS:3.0/E:P/RL:O/RC:C
CVSS v4
Risk Factor: High
Base Score: 8.2
Threat Score: 6.9
Threat Vector: CVSS:4.0/E:P
Vector: CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Vulnerability Information
Exploit Available: true
Exploit Ease: Exploits are available
Patch Publication Date: 9/25/2020
Vulnerability Publication Date: 9/25/2020
Reference Information
CVE: CVE-2020-15209
cwe: CWE-476