high7.5

CVE-2025-0649

Incorrect JSON input stringification in Google's Tensorflow serving versions up to 2.18.0 allows for potentially unbounded recursion leading to server crash.

Impact

Incorrect JSON input stringification in Google's Tensorflow serving versions up to 2.18.0 allows for potentially unbounded recursion leading to server crash.

Affected products

Vendor	Product	Affected versions
Google	Tensorflow Serving	through 2.18.0

Weakness classification

CWE-121 CWE-787

References

NVD record
CVE.org record
https://github.com/tensorflow/serving/commit/6cb013167d13f2ed3930aabb86dbc2c8c53f5adf