What’s Vulnerable › Vulnerabilities

CVE-2025-55559

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2025-09-25 · updated 2026-06-17
• Weakness: CWE-400

Description

An issue was discovered TensorFlow v2.18.0. A Denial of Service (DoS) occurs when padding is set to 'valid' in tf.keras.layers.Conv2D.

Affected products

• tensorflow: 2.18.0

References

• https://gist.github.com/shaoyuyoung/0e7d2a586297ae9c8ed14d8706749efc
• https://github.com/tensorflow/tensorflow/issues/84205
• https://github.com/tensorflow/tensorflow/issues/84205

Get alerted when CVE-2025-55559 or the next vulnerability affects your stack