High
Security advisory
In Tensorflow before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1, by controlling the `fill` argument of tf.strings.as_string, a malicious attacker is able to trigger a format string vulnerability due to the way the internal format use in a `printf` call is constructed. This may result in segmentation fault. The issue is patched in commit 33be22c65d86256e6826666662e40dbdfe70ee83, and is released in TensorFlow versions 1.15.4, 2.0.3, 2.1.2, 2.2.1, or 2.3.1.
- Products
- Not specified
- Affected versions
- Not specified
- Fixed versions
- Not specified
- CVEs
- CVE-2020-15203
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 31 Oct 2026, 12:38 UTC · Revision 1
Source evidence
In Tensorflow before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1, by controlling the `fill` argument of tf.strings.as_string, a malicious attacker is able to trigger a format string vulnerability due to the way the internal format use in a `printf` call is constructed. This may result in segmentation fault. The issue is patched in commit 33be22c65d86256e6826666662e40dbdfe70ee83, and is released in TensorFlow versions 1.15.4, 2.0.3, 2.1.2, 2.2.1, or 2.3.1.
osv:CVE-2020-15203
Complete source record
{
"id": "ca78304474f7eaaa813613150d457cb24f1abee8a9f4d7c91e3f4828a39206a6",
"url": "https://osv.dev/vulnerability/CVE-2020-15203",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "CVE-2020-15203",
"summary": "In Tensorflow before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1, by controlling the `fill` argument of tf.strings.as_string, a malicious attacker is able to trigger a format string vulnerability due to the way the internal format use in a `printf` call is constructed. This may result in segmentation fault. The issue is patched in commit 33be22c65d86256e6826666662e40dbdfe70ee83, and is released in TensorFlow versions 1.15.4, 2.0.3, 2.1.2, 2.2.1, or 2.3.1.",
"evidence": "osv:CVE-2020-15203",
"products": [],
"severity": "high",
"structured": {
"id": "CVE-2020-15203",
"aliases": [
"BIT-tensorflow-2020-15203",
"CVE-2020-15203",
"GHSA-xmq7-7fxm-rr79",
"PYSEC-2020-126",
"PYSEC-2020-283",
"PYSEC-2020-318"
],
"metrics": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
}
],
"affected": [
{
"ranges": [
{
"repo": "https://github.com/tensorflow/tensorflow",
"type": "GIT",
"events": [
{
"introduced": "0"
},
{
"fixed": "df8c55ce12b5cfc6f29b01889f7773911a75e6ef"
},
{
"introduced": "64c3d382cadf7bbe8e7e99884bede8284ff67f56"
},
{
"fixed": "295ad2781683835be974faba0a191528d8079768"
},
{
"introduced": "e5bf8de410005de06a7ff5393fafdf832ef1d4ad"
},
{
"fixed": "ab35f2bf7132f9d20a0bea9a5d1849862737d4b4"
},
{
"introduced": "2b96f3662bd776e277f86997659e61046b56c315"
},
{
"fixed": "25fba035f3e453d94490932096282c7b0624bbb3"
},
{
"introduced": "b36436b087bd8e8701ef51718179037cccdfc26e"
},
{
"fixed": "fcc4b966f1265f466e82617020af93670141b009"
},
{
"fixed": "33be22c65d86256e6826666662e40dbdfe70ee83"
}
],
"database_specific": {
"extracted_events": [
{
"cpe": "cpe:2.3:a:google:tensorflow:*:*:*:*:-:*:*:*",
"range": [
{
"introduced": "0"
},
{
"fixed": "1.15.4"
}
],
"source": "CPE_RANGE"
},
{
"cpe": "cpe:2.3:a:google:tensorflow:*:*:*:*:-:*:*:*",
"range": [
{
"introduced": "2.0.0"
},
{
"fixed": "2.0.3"
}
],
"source": "CPE_RANGE"
},
{
"cpe": "cpe:2.3:a:google:tensorflow:*:*:*:*:-:*:*:*",
"range": [
{
"introduced": "2.1.0"
},
{
"fixed": "2.1.2"
}
],
"source": "CPE_RANGE"
},
{
"cpe": "cpe:2.3:a:google:tensorflow:*:*:*:*:-:*:*:*",
"range": [
{
"introduced": "2.2.0"
},
{
"fixed": "2.2.1"
}
],
"source": "CPE_RANGE"
},
{
"cpe": "cpe:2.3:a:google:tensorflow:*:*:*:*:-:*:*:*",
"range": [
{
"introduced": "2.3.0"
},
{
"fixed": "2.3.1"
}
],
"source": "CPE_RANGE"
},
{
"range": [
{
"fixed": "33be22c65d86256e6826666662e40dbdfe70ee83"
}
],
"source": "REFERENCES_COMMIT"
},
{
"range": [
{
"fixed": "fcc4b966f1265f466e82617020af93670141b009"
}
],
"source": "REFERENCES_TAG",
"original_tag": "v2.3.1"
}
]
}
}
],
"versions": [
"v2.2.0",
"v2.1.1",
"v2.3.0",
"v2.0.2",
"v1.15.3",
"v2.0.1",
"v2.1.0",
"v1.15.2",
"v1.15.0",
"v1.15.0-rc3",
"v2.0.0",
"v1.15.0-rc2",
"v1.15.0-rc1",
"v1.15.0-rc0",
"v1.12.1",
"v1.9.0-rc2",
"v1.6.0-rc1",
"v1.1.0-rc2",
"v1.1.0-rc1",
"0.6.0",
"0.5.0"
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-15203.json",
"vanir_signatures": [
{
"id": "CVE-2020-15203-cfa10dde",
"digest": {
"threshold": 0.9,
"line_hashes": [
"206617985118558538529064265088358506050",
"36011196493717310763760445257547073539",
"192696605584224270812170664389958789291",
"1980539605768254906950715195079541493",
"152339483582920554484913187528460250088",
"143950074638617193147727768190516940432",
"66589887189099342910750197368961127255"
]
},
"source": "https://github.com/tensorflow/tensorflow/commit/33be22c65d86256e6826666662e40dbdfe70ee83",
"target": {
"file": "tensorflow/core/kernels/as_string_op.cc"
},
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1"
}
],
"vanir_signatures_modified": "2026-10-20T14:10:28Z"
}
}
],
"modified": "2026-10-20T14:10:28.726797749Z",
"provider": "osv",
"references": [
"https://github.com/tensorflow/tensorflow/releases/tag/v2.3.1",
"https://github.com/tensorflow/tensorflow/commit/33be22c65d86256e6826666662e40dbdfe70ee83",
"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-xmq7-7fxm-rr79"
],
"provider_metadata": {
"unresolved_ranges": [
{
"cpes": [
"cpe:2.3:o:opensuse:leap:15.2:*:*:*:*:*:*:*"
],
"vendor_product": "opensuse:leap",
"extracted_events": [
{
"range": [
{
"introduced": "15.2"
},
{
"last_affected": "15.2"
}
],
"source": "CPE_STRING"
}
]
}
]
}
},
"related_cves": [
{
"value": "CVE-2020-15203",
"evidence": "/id"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 388613,
"published_at": "2020-09-25T19:15:15.62+00:00"
}