https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T08:00:59.121506+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bit-tensorflow-2020-15204 BIT-tensorflow-2020-15204 — Segfault in Tensorflow 2026-10-06T08:00:59.255809+00:00

Affected: Bitnami: tensorflow

In eager mode, TensorFlow before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1 does not set the session state. Hence, calling `tf.raw_ops.GetSessionHandle` or `tf.raw_ops.GetSessionHandleV2` results in a null pointer dereference In linked snippet, in eager mode, `ctx->session_state()` returns `nullptr`. Since code immediately dereferences this, we get a segmentation fault. The issue is patched in commit 9a133d73ae4b4664d22bd1aa6d654fec13c52ee1, and is released in TensorFlow versions 1.15.4, 2.0.3, 2.1.2, 2.2.1, or 2.3.1.

 https://cve.radiocsirt.org/vuln/cnvd-2020-54473 cnvd-2020-54473 2026-10-06T08:00:59.255875+00:00 cnvd-2020-54473 https://cve.radiocsirt.org/vuln/euvd-2026-42767 EUVD-2026-42767 2026-10-06T08:00:59.255894+00:00 EUVD-2026-42767 https://cve.radiocsirt.org/vuln/fkie_cve-2020-15204 fkie_cve-2020-15204 2026-10-06T08:00:59.255906+00:00

In eager mode, TensorFlow before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1 does not set the session state. Hence, calling `tf.raw_ops.GetSessionHandle` or `tf.raw_ops.GetSessionHandleV2` results in a null pointer dereference In linked snippet, in eager mode, `ctx->session_state()` returns `nullptr`. Since code immediately dereferences this, we get a segmentation fault. The issue is patched in commit 9a133d73ae4b4664d22bd1aa6d654fec13c52ee1, and is released in TensorFlow versions 1.15.4, 2.0.3, 2.1.2, 2.2.1, or 2.3.1.

 https://cve.radiocsirt.org/vuln/ghsa-q8gv-q7wr-9jf8 GHSA-q8gv-q7wr-9jf8 — Segfault in Tensorflow 2026-10-06T08:00:59.255931+00:00

Affected: PyPI: tensorflow, PyPI: tensorflow-cpu, PyPI: tensorflow-gpu

### Impact In eager mode, TensorFlow does not set the session state. Hence, calling `tf.raw_ops.GetSessionHandle` or `tf.raw_ops.GetSessionHandleV2` results in a null pointer dereference: https://github.com/tensorflow/tensorflow/blob/0e68f4d3295eb0281a517c3662f6698992b7b2cf/tensorflow/core/kernels/session_ops.cc#L45

In the above snippet, in eager mode, `ctx->session_state()` returns `nullptr`. Since code immediately dereferences this, we get a segmentation fault.

### Patches We have patched the issue in 9a133d73ae4b4664d22bd1aa6d654fec13c52ee1 and will release patch releases for all versions between 1.15 and 2.3.

We recommend users to upgrade to TensorFlow 1.15.4, 2.0.3, 2.1.2, 2.2.1, or 2.3.1.

### For more information Please consult [our security guide](https://github.com/tensorflow/tensorflow/blob/master/SECURITY.md) for more information regarding the security model and how to contact us with issues and questions.

### Attribution This vulnerability has been reported by members of the Aivul Team from Qihoo 360.

 https://cve.radiocsirt.org/vuln/gsd-2020-15204 gsd-2020-15204 2026-10-06T08:00:59.255975+00:00 gsd-2020-15204 https://cve.radiocsirt.org/vuln/opensuse-su-2020:1766-1 openSUSE-SU-2020:1766-1 — Security update for tensorflow2 2026-10-06T08:00:59.255988+00:00

Security update for tensorflow2

 https://cve.radiocsirt.org/vuln/pysec-2020-127 PYSEC-2020-127 2026-10-06T08:00:59.256015+00:00

Affected: PyPI: tensorflow

In eager mode, TensorFlow before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1 does not set the session state. Hence, calling `tf.raw_ops.GetSessionHandle` or `tf.raw_ops.GetSessionHandleV2` results in a null pointer dereference In linked snippet, in eager mode, `ctx->session_state()` returns `nullptr`. Since code immediately dereferences this, we get a segmentation fault. The issue is patched in commit 9a133d73ae4b4664d22bd1aa6d654fec13c52ee1, and is released in TensorFlow versions 1.15.4, 2.0.3, 2.1.2, 2.2.1, or 2.3.1.