CVE-2025-0649

Incorrect JSON input stringification in Google's Tensorflow serving versions up to 2.18.0 allows for potentially unbounded recursion leading to server crash.

Score

CVSS 4.0 8.9 High

Status

Analyzed - cve-coordination@google.com

Published

2025-05-06

Last modified

2025-05-06

Weaknesses

CWE-121, CWE-787

Affected products

• Tensorflow (Google)
• Tensorflow Serving (Google)

References

• https://github.com/tensorflow/serving/commit/6cb013167d13f2ed3930aabb86dbc2c8c53f5adf