{"id":"CVE-2020-15203","aliases":["BIT-tensorflow-2020-15203","GHSA-xmq7-7fxm-rr79","PYSEC-2020-126","PYSEC-2020-283","PYSEC-2020-318"],"url":"https://o3.security/vulnerability/CVE-2020-15203","summary":"Denial of Service in Tensorflow","details":"In Tensorflow before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1, by controlling the `fill` argument of tf.strings.as_string, a malicious attacker is able to trigger a format string vulnerability due to the way the internal format use in a `printf` call is constructed. This may result in segmentation fault. The issue is patched in commit 33be22c65d86256e6826666662e40dbdfe70ee83, and is released in TensorFlow versions 1.15.4, 2.0.3, 2.1.2, 2.2.1, or 2.3.1.","published":"2020-09-25T19:15:15.620Z","modified":"2026-08-07T16:35:58.591859Z","cvss":{"score":7.5,"severity":"HIGH","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},"epss":null,"cisaKev":null,"exploitsKnown":null,"affectedPackages":[{"ecosystem":"PyPI","name":"tensorflow","fixedVersion":"1.15.4"},{"ecosystem":"PyPI","name":"tensorflow","fixedVersion":"2.0.3"},{"ecosystem":"PyPI","name":"tensorflow","fixedVersion":"2.1.2"},{"ecosystem":"PyPI","name":"tensorflow","fixedVersion":"2.2.1"},{"ecosystem":"PyPI","name":"tensorflow","fixedVersion":"2.3.1"},{"ecosystem":"PyPI","name":"tensorflow-cpu","fixedVersion":"1.15.4"},{"ecosystem":"PyPI","name":"tensorflow-cpu","fixedVersion":"2.0.3"},{"ecosystem":"PyPI","name":"tensorflow-cpu","fixedVersion":"2.1.2"},{"ecosystem":"PyPI","name":"tensorflow-cpu","fixedVersion":"2.2.1"},{"ecosystem":"PyPI","name":"tensorflow-cpu","fixedVersion":"2.3.1"},{"ecosystem":"PyPI","name":"tensorflow-gpu","fixedVersion":"1.15.4"},{"ecosystem":"PyPI","name":"tensorflow-gpu","fixedVersion":"2.0.3"},{"ecosystem":"PyPI","name":"tensorflow-gpu","fixedVersion":"2.1.2"},{"ecosystem":"PyPI","name":"tensorflow-gpu","fixedVersion":"2.2.1"},{"ecosystem":"PyPI","name":"tensorflow-gpu","fixedVersion":"2.3.1"}],"fix":{"url":"https://github.com/tensorflow/tensorflow/commit/33be22c65d86256e6826666662e40dbdfe70ee83","label":"tensorflow/tensorflow@33be22c"},"references":[{"type":"ADVISORY","url":"http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00065.html"},{"type":"ADVISORY","url":"https://github.com/tensorflow/tensorflow/releases/tag/v2.3.1"},{"type":"FIX","url":"https://github.com/tensorflow/tensorflow/commit/33be22c65d86256e6826666662e40dbdfe70ee83"},{"type":"EVIDENCE","url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-xmq7-7fxm-rr79"}],"provenance":{"sources":["OSV.dev","FIRST.org (EPSS)"],"lastVerified":"2026-08-07T16:35:58.591859Z"}}