Lucene search

K
cvelistGitHub_MCVELIST:CVE-2022-23592
HistoryFeb 04, 2022 - 10:32 p.m.

CVE-2022-23592 Out of bounds read in Tensorflow

2022-02-0422:32:14
CWE-125
GitHub_M
raw.githubusercontent.com
2

8 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

68.6%

Tensorflow is an Open Source Machine Learning Framework. TensorFlow’s type inference can cause a heap out of bounds read as the bounds checking is done in a DCHECK (which is a no-op during production). An attacker can control the input_idx variable such that ix would be larger than the number of values in node_t.args. The fix will be included in TensorFlow 2.8.0. This is the only affected version.

8 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

68.6%

Related for CVELIST:CVE-2022-23592