https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T11:34:41.668634+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bit-tensorflow-2022-35960 BIT-tensorflow-2022-35960 — `CHECK` failure in `TensorListReserve` in TensorFlow 2026-10-07T11:34:41.676013+00:00

Affected: Bitnami: tensorflow

TensorFlow is an open source platform for machine learning. In `core/kernels/list_kernels.cc's TensorListReserve`, `num_elements` is assumed to be a tensor of size 1. When a `num_elements` of more than 1 element is provided, then `tf.raw_ops.TensorListReserve` fails the `CHECK_EQ` in `CheckIsAlignedAndSingleElement`. We have patched the issue in GitHub commit b5f6fbfba76576202b72119897561e3bd4f179c7. The fix will be included in TensorFlow 2.10.0. We will also cherrypick this commit on TensorFlow 2.9.1, TensorFlow 2.8.1, and TensorFlow 2.7.2, as these are also affected and still in supported range. There are no known workarounds for this issue.

 https://cve.radiocsirt.org/vuln/cnvd-2023-15783 cnvd-2023-15783 2026-10-07T11:34:41.676066+00:00 cnvd-2023-15783 https://cve.radiocsirt.org/vuln/euvd-2026-233647 EUVD-2026-233647 2026-10-07T11:34:41.676084+00:00 EUVD-2026-233647 https://cve.radiocsirt.org/vuln/fkie_cve-2022-35960 fkie_cve-2022-35960 2026-10-07T11:34:41.676096+00:00

TensorFlow is an open source platform for machine learning. In `core/kernels/list_kernels.cc's TensorListReserve`, `num_elements` is assumed to be a tensor of size 1. When a `num_elements` of more than 1 element is provided, then `tf.raw_ops.TensorListReserve` fails the `CHECK_EQ` in `CheckIsAlignedAndSingleElement`. We have patched the issue in GitHub commit b5f6fbfba76576202b72119897561e3bd4f179c7. The fix will be included in TensorFlow 2.10.0. We will also cherrypick this commit on TensorFlow 2.9.1, TensorFlow 2.8.1, and TensorFlow 2.7.2, as these are also affected and still in supported range. There are no known workarounds for this issue.

 https://cve.radiocsirt.org/vuln/ghsa-v5xg-3q2c-c2r4 GHSA-v5xg-3q2c-c2r4 — TensorFlow vulnerable to `CHECK` failure in `TensorListReserve` via missing validation 2026-10-07T11:34:41.676120+00:00

Affected: PyPI: tensorflow, PyPI: tensorflow-cpu, PyPI: tensorflow-gpu

### Impact In [`core/kernels/list_kernels.cc's TensorListReserve`](https://github.com/tensorflow/tensorflow/blob/c8ba76d48567aed347508e0552a257641931024d/tensorflow/core/kernels/list_kernels.cc#L322-L325), `num_elements` is assumed to be a tensor of size 1. When a `num_elements` of more than 1 element is provided, then `tf.raw_ops.TensorListReserve` fails the `CHECK_EQ` in `CheckIsAlignedAndSingleElement`. ```python import tensorflow as tf

tf.raw_ops.TensorListReserve(element_shape=(1,1), num_elements=tf.constant([1,1], dtype=tf.int32), element_dtype=tf.int8) ```

### Patches We have patched the issue in GitHub commit [b5f6fbfba76576202b72119897561e3bd4f179c7](https://github.com/tensorflow/tensorflow/commit/b5f6fbfba76576202b72119897561e3bd4f179c7).

The fix will be included in TensorFlow 2.10.0. We will also cherrypick this commit on TensorFlow 2.9.1, TensorFlow 2.8.1, and TensorFlow 2.7.2, as these are also affected and still in supported range.

### For more information Please consult [our security guide](https://github.com/tensorflow/tensorflow/blob/master/SECURITY.md) for more information regarding the security model and how to contact us with issues and questions.

### Attribution This vulnerability has been reported by Kang Hong Jin from Singapore Management University.

 https://cve.radiocsirt.org/vuln/gsd-2022-35960 gsd-2022-35960 2026-10-07T11:34:41.676159+00:00 gsd-2022-35960 https://cve.radiocsirt.org/vuln/opensuse-su-2024:12355-1 openSUSE-SU-2024:12355-1 — tensorflow-lite-2.10.0-1.1 on GA media 2026-10-07T11:34:41.676171+00:00

tensorflow-lite-2.10.0-1.1 on GA media

 https://cve.radiocsirt.org/vuln/pysec-2026-1036 PYSEC-2026-1036 — TensorFlow vulnerable to `CHECK` failure in `TensorListReserve` via missing validation 2026-10-07T11:34:41.676199+00:00

Affected: PyPI: tensorflow-gpu

### Impact In [`core/kernels/list_kernels.cc's TensorListReserve`](https://github.com/tensorflow/tensorflow/blob/c8ba76d48567aed347508e0552a257641931024d/tensorflow/core/kernels/list_kernels.cc#L322-L325), `num_elements` is assumed to be a tensor of size 1. When a `num_elements` of more than 1 element is provided, then `tf.raw_ops.TensorListReserve` fails the `CHECK_EQ` in `CheckIsAlignedAndSingleElement`. ```python import tensorflow as tf

tf.raw_ops.TensorListReserve(element_shape=(1,1), num_elements=tf.constant([1,1], dtype=tf.int32), element_dtype=tf.int8) ```

### Patches We have patched the issue in GitHub commit [b5f6fbfba76576202b72119897561e3bd4f179c7](https://github.com/tensorflow/tensorflow/commit/b5f6fbfba76576202b72119897561e3bd4f179c7).

The fix will be included in TensorFlow 2.10.0. We will also cherrypick this commit on TensorFlow 2.9.1, TensorFlow 2.8.1, and TensorFlow 2.7.2, as these are also affected and still in supported range.

### For more information Please consult [our security guide](https://github.com/tensorflow/tensorflow/blob/master/SECURITY.md) for more information regarding the security model and how to contact us with issues and questions.

### Attribution This vulnerability has been reported by Kang Hong Jin from Singapore Management University.