CVE-2022-23594

HIGH

Google Tensorflow < 2.7.1 - Out-of-Bounds Write

Title source: rule
STIX 2.1

Description

Tensorflow is an Open Source Machine Learning Framework. The TFG dialect of TensorFlow (MLIR) makes several assumptions about the incoming `GraphDef` before converting it to the MLIR-based dialect. If an attacker changes the `SavedModel` format on disk to invalidate these assumptions and the `GraphDef` is then converted to MLIR-based IR then they can cause a crash in the Python interpreter. Under certain scenarios, heap OOB read/writes are possible. These issues have been discovered via fuzzing and it is possible that more weaknesses exist. We will patch them as they are discovered.

Scores

CVSS v3 8.8
EPSS 0.0002
EPSS Percentile 5.0%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact total

Details

CWE
CWE-125 CWE-787
Status published
Products (4)
google/tensorflow 2.7.0
pypi/tensorflow 2.7.0 - 2.7.1PyPI
pypi/tensorflow-cpu 2.7.0 - 2.7.1PyPI
pypi/tensorflow-gpu 2.7.0 - 2.7.1PyPI
Published Feb 04, 2022
Tracked Since Feb 18, 2026