CVE-2020-15265

In Tensorflow before version 2.4.0, an attacker can pass an invalid `axis` value to `tf.quantization.quantize_and_dequantize`. This results in accessing a dimension outside the rank of the input tensor in the C++ kernel implementation. However, dim_size only does a DCHECK to validate the argument and then uses it to access the corresponding element of an array. Since in normal builds, `DCHECK`-like macros are no-ops, this results in segfault and access out of bounds of the array. The issue is patched in eccb7ec454e6617738554a255d77f08e60ee0808 and TensorFlow 2.4.0 will be released containing the patch. TensorFlow nightly packages after this commit will also have the issue resolved.

• CWE-125

• https://github.com/tensorflow/tensorflow/commit/eccb7ec454e6617738554a255d77f08e60ee0808Patch, Third Party Advisory
• https://github.com/tensorflow/tensorflow/issues/42105Patch, Third Party Advisory
• https://github.com/tensorflow/tensorflow/security/advisories/GHSA-rrfp-j2mp-hq9cExploit, Patch, Third Party Advisory
• https://github.com/tensorflow/tensorflow/commit/eccb7ec454e6617738554a255d77f08e60ee0808Patch, Third Party Advisory
• https://github.com/tensorflow/tensorflow/issues/42105Patch, Third Party Advisory
• https://github.com/tensorflow/tensorflow/security/advisories/GHSA-rrfp-j2mp-hq9cExploit, Patch, Third Party Advisory

Published

Oct 21, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-1526An elevation of privilege vulnerability exists when the Wind…7.8
• CVE-2020-15260PJSIP is a free and open source multimedia communication lib…6.8
• CVE-2020-15261On Windows the Veyon Service before version 4.4.2 contains a…6.7
• CVE-2020-15262In webpack-subresource-integrity before version 1.5.1, all d…3.7
• CVE-2020-15263In platform before version 9.4.4, inline attributes are not …6.1
• CVE-2020-15264The Boxstarter installer before version 2.13.0 configures C:…7.8
• CVE-2020-15266In Tensorflow before version 2.4.0, when the `boxes` argumen…7.5
• CVE-2020-15269In Spree before versions 3.7.11, 4.0.4, or 4.1.11, expired u…9.1
• CVE-2020-1527An elevation of privilege vulnerability exists when the Wind…7.8
• CVE-2020-15270Parse Server (npm package parse-server) broadcasts events to…4.3
• CVE-2020-15271In lookatme (python/pypi package) versions prior to 2.3.0, t…8.8
• CVE-2020-15272In the git-tag-annotation-action (open source GitHub Action)…9.6