CVE-2025-55556: Medium severity Google TensorFlow vulnerability
Published Sep 25, 2025
·Updated
TensorFlow v2.18.0 was discovered to output random results when compiling Embedding, leading to unexpected behavior in the application.
Affected Software
4 affected components
Google TensorFlow
Google TensorFlow=2.18.0
debian/tensorflow*
debian/tensorflow<=2.14.1+dfsg-3.1
Event History
Sep 25, 2025
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via OSV·12:00 AM
DescriptionSeverity
Data Sourced
via NVD·04:15 PM
DescriptionSeverityWeaknessAffected Software
Data Sourced
via OSV·04:15 PM
Affected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-55556?
The severity of CVE-2025-55556 is classified as medium due to its potential to cause unexpected behavior in applications using TensorFlow.
2
How do I fix CVE-2025-55556?
To fix CVE-2025-55556, upgrade to TensorFlow version 2.18.1 or later, where the issue has been addressed.
3
What type of vulnerability is CVE-2025-55556?
CVE-2025-55556 is a programming error vulnerability that results in TensorFlow outputting random results.
4
Which versions of TensorFlow are affected by CVE-2025-55556?
CVE-2025-55556 affects TensorFlow version 2.18.0.
5
What are the potential impacts of CVE-2025-55556?
The potential impacts of CVE-2025-55556 include degraded application functionality and unpredictable output in neural network models.