CVE-2022-23567

MEDIUM

TensorFlow < 2.5.3 - Denial of Service via Integer Overflow in Sparse*Cwise* Ops

Title source: llm
STIX 2.1

Description

Tensorflow is an Open Source Machine Learning Framework. The implementations of `Sparse*Cwise*` ops are vulnerable to integer overflows. These can be used to trigger large allocations (so, OOM based denial of service) or `CHECK`-fails when building new `TensorShape` objects (so, assert failures based denial of service). We are missing some validation on the shapes of the input tensors as well as directly constructing a large `TensorShape` with user-provided dimensions. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range.

Scores

CVSS v3 6.5
EPSS 0.0108
EPSS Percentile 60.7%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment
Exploitation poc
Automatable no
Technical Impact partial

Details

CWE
CWE-190
Status published
Products (5)
google/tensorflow 2.7.0
google/tensorflow < 2.5.2
pypi/tensorflow 0 - 2.5.3PyPI
pypi/tensorflow-cpu 0 - 2.5.3PyPI
pypi/tensorflow-gpu 0 - 2.5.3PyPI
Published Feb 03, 2022
Tracked Since Feb 18, 2026