CVE-2022-41889 — NULL Pointer Dereference in Tensorflow

Vendor	Product	Version range	Fixed in
debian	tensorflow	—	—
google	tensorflow	< 2.8.4	2.8.4
google	tensorflow	>= 2.10.0 < 2.10.1	2.10.1
google	tensorflow	>= 2.9.0 < 2.9.3	2.9.3
intel	optimization_for_tensorflow	>= 0 < 2.8.4	2.8.4
intel	optimization_for_tensorflow	>= 2.10.0 < 2.10.1	2.10.1
intel	optimization_for_tensorflow	>= 2.9.0 < 2.9.3	2.9.3
msrc	cbl2_tensorflow_2.11.0-1_on_cbl_mariner_2.0	—	—
msrc	cbl_mariner_2.0_arm	—	—
msrc	cbl_mariner_2.0_x64	—	—
tensorflow	tensorflow	< 2.8.4	2.8.4
tensorflow	tensorflow	—	—
tensorflow	tensorflow	—	—

OSV

Segfault via invalid attributes in `pywrap_tfe_src.cc`

osv·2022-11-21

CVE-2022-41889 [MEDIUM] Segfault via invalid attributes in `pywrap_tfe_src.cc` Segfault via invalid attributes in `pywrap_tfe_src.cc` ### Impact If a list of quantized tensors is assigned to an attribute, the pywrap code fails to parse the tensor and returns a `nullptr`, which is not caught. An example can be seen in [`tf.compat.v1.extract_volume_patches`](https://github.com/tensorflow/tensorflow/blob/master/tensorflow/core/kernels/image/generate_box_proposals_op.cu.cc) by passing in quantized tensors as input `ksizes`. ```python import numpy as np import tensorflow as tf a_input = np.array([1, -1], dtype= np.int32) a_ksizes = a_strides = tf.constant(dtype=tf.dtypes.qint16, value=[[1, 4], [5, 2]]) tf.compat.v1.extract_volume_patches(input=a_input,ksizes=a_ksizes,strides=a_strides,padding='VALID') ``` ### Patches We have patched the issue in GitHub commit [e9e955

GHSA

Segfault via invalid attributes in `pywrap_tfe_src.cc`

ghsa·2022-11-21

CVE-2022-41889 [MEDIUM] CWE-476 Segfault via invalid attributes in `pywrap_tfe_src.cc` Segfault via invalid attributes in `pywrap_tfe_src.cc` ### Impact If a list of quantized tensors is assigned to an attribute, the pywrap code fails to parse the tensor and returns a `nullptr`, which is not caught. An example can be seen in [`tf.compat.v1.extract_volume_patches`](https://github.com/tensorflow/tensorflow/blob/master/tensorflow/core/kernels/image/generate_box_proposals_op.cu.cc) by passing in quantized tensors as input `ksizes`. ```python import numpy as np import tensorflow as tf a_input = np.array([1, -1], dtype= np.int32) a_ksizes = a_strides = tf.constant(dtype=tf.dtypes.qint16, value=[[1, 4], [5, 2]]) tf.compat.v1.extract_volume_patches(input=a_input,ksizes=a_ksizes,strides=a_strides,padding='VALID') ``` ### Patches We have patched the issue in GitHub commit [e9e955

Microsoft

Segfault via invalid attributes in `pywrap_tfe_src.cc` in Tensorflow

vendor_msrc·2022-11-08·CVSS 7.5

CVE-2022-41889 [MEDIUM] CWE-476 Segfault via invalid attributes in `pywrap_tfe_src.cc` in Tensorflow Segfault via invalid attributes in `pywrap_tfe_src.cc` in Tensorflow FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See this blog post for more information. If impact to additional products is identified, we will update the CVE to reflect this. Mariner: Mariner GitHub_M: GitHub_M Customer Action Required: Yes Remediation: CBL-Mariner Releases Refer

Debian

CVE-2022-41889: tensorflow - TensorFlow is an open source platform for machine learning. If a list of quantiz...

vendor_debian·2022·CVSS 5.5

CVE-2022-41889 [MEDIUM] CVE-2022-41889: tensorflow - TensorFlow is an open source platform for machine learning. If a list of quantiz... TensorFlow is an open source platform for machine learning. If a list of quantized tensors is assigned to an attribute, the pywrap code fails to parse the tensor and returns a `nullptr`, which is not caught. An example can be seen in `tf.compat.v1.extract_volume_patches` by passing in quantized tensors as input `ksizes`. We have patched the issue in GitHub commit e9e95553e5411834d215e6770c81a83a3d0866ce. The fix will be included in TensorFlow 2.11. We will also cherrypick this commit on TensorFlow 2.10.1, 2.9.3, and TensorFlow 2.8.4, as these are also affected and still in supported range. Scope: local forky: resolved sid: resolved

CVE-2022-41889: TensorFlow is an open source platform for machine learning. If a list of quantized tensors is assigned to an attribute, the pywrap code fails to parse the…

Affected

CVSS provenance