CVE-2025-0649CWE-121

Stack Exhaustion In Tensorflow Serving

High · published May 6, 2025

CVSS v4.0
8.9
EPSS
0%
Percentile
8.1
In the wild
Unconfirmed
What it is

Incorrect JSON input stringification in Google's Tensorflow serving versions up to 2.18.0 allows for potentially unbounded recursion leading to server crash.

The record
Technical detail
CVSS v4.0
8.9 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H
EPSS
0.00189 · 8.1th percentile
Weakness
CWE-121 · Stack-based Buffer Overflow
Published
2025-05-06T20:20Z
EPSS history
Timeline
  • 06 MAY 20:20Z
    Stack Exhaustion In Tensorflow Serving
    cvelistv5