CVE-2025-55559

EUVD-2025-31122
An issue was discovered TensorFlow v2.18.0. A Denial of Service (DoS) occurs when padding is set to 'valid' in tf.keras.layers.Conv2D.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.5 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 10.68%
Affected Products (NVD)
VendorProductVersion
googletensorflow
2.18.0
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
tensorflow
forky
unimportant
sid
unimportant
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
tensorflow
jammy
dne
noble
dne
plucky
dne
questing
ignored
resolute
needs-triage
Common Weakness Enumeration
References
https://gist.github.com/shaoyuyoung/0e7d2a586297ae9c8ed14d8706749efc
https://github.com/tensorflow/tensorflow/issues/84205
https://github.com/tensorflow/tensorflow/issues/84205