Search for vulnerabilities
| Vulnerability ID | VCID-3r8v-c8cq-dkfp |
| Aliases |
CVE-2020-15206
GHSA-w5gh-2wr2-pm6g PYSEC-2020-129 PYSEC-2020-286 PYSEC-2020-321 |
| Summary | In Tensorflow before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1, changing the TensorFlow's `SavedModel` protocol buffer and altering the name of required keys results in segfaults and data corruption while loading the model. This can cause a denial of service in products using `tensorflow-serving` or other inference-as-a-service installments. Fixed were added in commits f760f88b4267d981e13f4b302c437ae800445968 and fcfef195637c6e365577829c4d67681695956e7d (both going into TensorFlow 2.2.0 and 2.3.0 but not yet backported to earlier versions). However, this was not enough, as #41097 reports a different failure mode. The issue is patched in commit adf095206f25471e864a8e63a0f1caef53a0e3a6, and is released in TensorFlow versions 1.15.4, 2.0.3, 2.1.2, 2.2.1, or 2.3.1. |
| Status | Published |
| Exploitability | None |
| Weighted Severity | None |
| Risk | None |
| Affected and Fixed Packages | Package Details |
| CWE-20 | Improper Input Validation |
| System | Score | Found at |
|---|---|---|
| epss | 0.00472 | https://api.first.org/data/v1/epss?cve=CVE-2020-15206 |
| cvssv3.1_qr | HIGH | https://github.com/advisories/GHSA-w5gh-2wr2-pm6g |
| cvssv3.1_qr | HIGH | https://github.com/tensorflow/tensorflow/security/advisories/GHSA-w5gh-2wr2-pm6g |
| Percentile | 0.64993 |
| EPSS Score | 0.00472 |
| Published At | May 30, 2026, 12:55 p.m. |
| Date | Actor | Action | Source | VulnerableCode Version |
|---|---|---|---|---|
| 2026-05-30T20:19:43.478442+00:00 | Pypa Importer | Import | https://github.com/pypa/advisory-database/blob/main/vulns/tensorflow-gpu/PYSEC-2020-321.yaml | 38.6.0 |