CVE-2022-29208

HIGH

TensorFlow <2.9.0-2.6.4 - DoS

Title source: llm
STIX 2.1

Description

TensorFlow is an open source platform for machine learning. Prior to versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4, the implementation of `tf.raw_ops.EditDistance` has incomplete validation. Users can pass negative values to cause a segmentation fault based denial of service. In multiple places throughout the code, one may compute an index for a write operation. However, the existing validation only checks against the upper bound of the array. Hence, it is possible to write before the array by massaging the input to generate negative values for `loc`. Versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4 contain a patch for this issue.

References (6)

Core 6
Core References
Release Notes, Third Party Advisory x_refsource_misc
https://github.com/tensorflow/tensorflow/releases/tag/v2.6.4
Release Notes, Third Party Advisory x_refsource_misc
https://github.com/tensorflow/tensorflow/releases/tag/v2.7.2
Release Notes, Third Party Advisory x_refsource_misc
https://github.com/tensorflow/tensorflow/releases/tag/v2.8.1
Release Notes, Third Party Advisory x_refsource_misc
https://github.com/tensorflow/tensorflow/releases/tag/v2.9.0
Exploit, Patch, Third Party Advisory x_refsource_confirm
https://github.com/tensorflow/tensorflow/security/advisories/GHSA-2r2f-g8mw-9gvr

Scores

CVSS v3 7.1
EPSS 0.0014
EPSS Percentile 33.0%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation poc
Automatable no
Technical Impact partial

Details

CWE
CWE-787
Status published
Products (7)
google/tensorflow 2.7.0 rc0 (2 CPE variants)
google/tensorflow 2.8.0 (3 CPE variants)
google/tensorflow 2.9.0 rc0 (2 CPE variants)
google/tensorflow < 2.6.4
pypi/tensorflow 0 - 2.6.4PyPI
pypi/tensorflow-cpu 0 - 2.6.4PyPI
pypi/tensorflow-gpu 0 - 2.6.4PyPI
Published May 20, 2022
Tracked Since Feb 18, 2026