CVE-2025-55559: Google Tensorflow

High severity, CVSS 7.5. EPSS: 0.2% chance of exploitation in the next 30 days.

An issue was discovered TensorFlow v2.18.0. A Denial of Service (DoS) occurs when padding is set to 'valid' in tf.keras.layers.Conv2D.

Affected products

• Google Tensorflow: version 2.18.0 only

Published 2025-09-25. Last modified 2026-06-17.