CVE-2020-15266

In Tensorflow before version 2.4.0, when the `boxes` argument of `tf.image.crop_and_resize` has a very large value, the CPU kernel implementation receives it as a C++ `nan` floating point value. Attempting to operate on this is undefined behavior which later produces a segmentation fault. The issue is patched in eccb7ec454e6617738554a255d77f08e60ee0808 and TensorFlow 2.4.0 will be released containing the patch. TensorFlow nightly packages after this commit will also have the issue resolved.

• CWE-119
• CWE-119

• https://github.com/tensorflow/tensorflow/issues/42129Exploit, Patch, Third Party Advisory
• https://github.com/tensorflow/tensorflow/pull/42143/commits/3ade2efec2e90c6237de32a19680caaa3ebc2845Patch, Third Party Advisory
• https://github.com/tensorflow/tensorflow/security/advisories/GHSA-xwhf-g6j5-j5gcPatch, Third Party Advisory
• https://github.com/tensorflow/tensorflow/issues/42129Exploit, Patch, Third Party Advisory
• https://github.com/tensorflow/tensorflow/pull/42143/commits/3ade2efec2e90c6237de32a19680caaa3ebc2845Patch, Third Party Advisory
• https://github.com/tensorflow/tensorflow/security/advisories/GHSA-xwhf-g6j5-j5gcPatch, Third Party Advisory

Published

Oct 21, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-15260PJSIP is a free and open source multimedia communication lib…6.8
• CVE-2020-15261On Windows the Veyon Service before version 4.4.2 contains a…6.7
• CVE-2020-15262In webpack-subresource-integrity before version 1.5.1, all d…3.7
• CVE-2020-15263In platform before version 9.4.4, inline attributes are not …6.1
• CVE-2020-15264The Boxstarter installer before version 2.13.0 configures C:…7.8
• CVE-2020-15265In Tensorflow before version 2.4.0, an attacker can pass an …7.5
• CVE-2020-15269In Spree before versions 3.7.11, 4.0.4, or 4.1.11, expired u…9.1
• CVE-2020-1527An elevation of privilege vulnerability exists when the Wind…7.8
• CVE-2020-15270Parse Server (npm package parse-server) broadcasts events to…4.3
• CVE-2020-15271In lookatme (python/pypi package) versions prior to 2.3.0, t…8.8
• CVE-2020-15272In the git-tag-annotation-action (open source GitHub Action)…9.6
• CVE-2020-15273baserCMS before version 4.4.1 is vulnerable to Cross-Site Sc…8.1