CVE-2022-35940Integer Overflow or Wraparound in Tensorflow

Severity
7.5HIGHNVD
CNA5.9
EPSS
0.2%
top 58.99%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedSep 16

Description

TensorFlow is an open source platform for machine learning. The `RaggedRangOp` function takes an argument `limits` that is eventually used to construct a `TensorShape` as an `int64`. If `limits` is a very large float, it can overflow when converted to an `int64`. This triggers an `InvalidArgument` but also throws an abort signal that crashes the program. We have patched the issue in GitHub commit 37cefa91bee4eace55715eeef43720b958a01192. The fix will be included in TensorFlow 2.10.0. We will als

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HExploitability: 3.9 | Impact: 3.6

Affected Packages3 packages

NVDgoogle/tensorflow2.7.02.7.2+3
CVEListV5tensorflow/tensorflow< 2.7.2+2
PyPIintel/optimization_for_tensorflow2.8.02.8.1+2

Patches

🔴Vulnerability Details

3
CVEList
Int overflow in `RaggedRangeOp` in Tensoflow2022-09-16
OSV
TensorFlow vulnerable to Int overflow in `RaggedRangeOp`2022-09-16
GHSA
TensorFlow vulnerable to Int overflow in `RaggedRangeOp`2022-09-16

📋Vendor Advisories

2
Oracle
Oracle Oracle Fusion Middleware Risk Matrix: SSL Module (Apache Portable Runtime) — CVE-2021-359402022-07-15
Debian
CVE-2022-35940: tensorflow - TensorFlow is an open source platform for machine learning. The `RaggedRangOp` f...2022
CVE-2022-35940 — Integer Overflow or Wraparound | cvebase