{"data":{"id":"9789f290-2ea3-4d33-bda9-58fd668c1bed","title":"CVE-2019-16778: In TensorFlow before 1.15, a heap buffer overflow in UnsortedSegmentSum can be produced when the Index template…","summary":"CVE-2019-16778 affects TensorFlow before 1.15. When the Index template argument is int32, a heap buffer overflow in UnsortedSegmentSum can occur because data_size and num_segments are truncated from int64 to int32, producing negative values that access out-of-bounds heap memory. The source says exploitation is unlikely and that the issue was detected and fixed internally in TensorFlow 1.15 and 2.0.","solution":"Fixed in TensorFlow 1.15 and 2.0, per the source. The linked patch commit is db4f9717c41bccc3ce10099ab61996b246099892.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2019-16778","publishedAt":"2019-12-17T02:15:11.403Z","cveId":"CVE-2019-16778","cweIds":["CWE-122","CWE-681"],"cvssScore":"2.6","cvssSeverity":"low","severity":"low","attackType":["other"],"issueType":"vulnerability","affectedPackages":["tensorflow@< 1.15.0 (fixed: 1.15.0)","tensorflow-cpu@< 1.15.0 (fixed: 1.15.0)","tensorflow-gpu@< 1.15.0 (fixed: 1.15.0)"],"affectedPackageNames":["tensorflow","tensorflow-cpu","tensorflow-gpu"],"affectedPackageRefs":["pypi:tensorflow","pypi:tensorflow-cpu","pypi:tensorflow-gpu"],"affectedVendors":["Google"],"affectedVendorsRaw":["TensorFlow"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"TensorFlow heap buffer overflow in UnsortedSegmentSum with int32 Index","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00788,"epssCheckedAt":"2026-11-04T12:08:34.339Z","kevDateAdded":null,"advisoryAliases":["GHSA-844w-j86r-4x2j"],"affectedPackagesSource":"ghsa","affectedPackagesCheckedAt":"2026-10-10T04:01:10.182Z","patchAvailable":true,"disclosureDate":null,"fixReleasedAt":"2019-10-16T17:28:36.285Z","daysToFix":-62,"fixCheckedAt":"2026-10-29T21:52:57.071Z","capecIds":["CAPEC-100"],"crossRefCount":0,"attackSophistication":"advanced","impactType":["confidentiality","integrity"],"aiComponentTargeted":"framework","llmSpecific":false,"classifierConfidence":0.95,"researchCategory":null,"atlasIds":null,"fixes":[{"ecosystem":"pypi","name":"tensorflow","fixedVersion":"1.15.0","matchedVersion":"1.15.0","fixReleasedAt":"2019-10-16T17:28:36.285Z","daysToFix":-62,"match":"ecosystem","source":"tracked","status":"found","checkedAt":"2026-10-29T21:52:56.918Z"},{"ecosystem":"pypi","name":"tensorflow-gpu","fixedVersion":"1.15.0","matchedVersion":"1.15.0","fixReleasedAt":"2019-10-16T17:36:31.756Z","daysToFix":-62,"match":"ecosystem","source":"registry","status":"found","checkedAt":"2026-10-29T21:52:56.918Z"},{"ecosystem":"pypi","name":"tensorflow-cpu","fixedVersion":"1.15.0","matchedVersion":"1.15.0","fixReleasedAt":"2019-10-16T17:33:59.861Z","daysToFix":-62,"match":"ecosystem","source":"registry","status":"found","checkedAt":"2026-10-29T21:52:56.918Z"}]}}