CVE-2025-55559: High severity TensorFlow TensorFlow vulnerability
Published Sep 25, 2025
·Updated
An issue was discovered TensorFlow v2.18.0. A Denial of Service (DoS) occurs when padding is set to 'valid' in tf.keras.layers.Conv2D.
Affected Software
2 affected components
TensorFlow TensorFlow
Google TensorFlow=2.18.0
Event History
Sep 25, 2025
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·04:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-55559?
CVE-2025-55559 has a severity rating that indicates it can lead to a Denial of Service (DoS) condition.
2
How do I fix CVE-2025-55559?
To mitigate CVE-2025-55559, ensure that padding is set to 'same' instead of 'valid' in tf.keras.layers.Conv2D.
3
What versions of TensorFlow are affected by CVE-2025-55559?
CVE-2025-55559 affects TensorFlow version 2.18.0.
4
What is the nature of the vulnerability in CVE-2025-55559?
CVE-2025-55559 is a Denial of Service (DoS) vulnerability triggered by incorrect padding settings in convolutional layers.
5
Can CVE-2025-55559 be exploited remotely?
Yes, CVE-2025-55559 can be exploited remotely if an attacker can access the affected TensorFlow application.