Lucene search
GoogleOSV:BIT-TENSORFLOW-2022-41880HistoryMar 06, 2024 - 11:11 a.m.
BIT-tensorflow-2022-41880
2024-03-0611:11:39
Google
osv.dev
5
tensorflow
machine learning
basecandidatesamplerop
github commit
heap oob read
TensorFlow is an open source platform for machine learning. When the BaseCandidateSamplerOp function receives a value in true_classes larger than range_max, a heap oob read occurs. We have patched the issue in GitHub commit b389f5c944cadfdfe599b3f1e4026e036f30d2d4. The fix will be included in TensorFlow 2.11. We will also cherrypick this commit on TensorFlow 2.10.1, 2.9.3, and TensorFlow 2.8.4, as these are also affected and still in supported range.
| CPE | Name | Operator | Version |
|---|---|---|---|
| tensorflow | ge | 2.9.0 | |
| tensorflow | lt | 2.8.4 | |
| tensorflow | ge | 2.10.0 | |
| tensorflow | le | 2.10.0 | |
| tensorflow | lt | 2.9.3 |
Related
cve
cve
CVE-2022-41880
2022-11-18 22:15:10
osv
osv
Tensorflow vulnerable to Out-of-Bounds Read
2022-11-22 00:10:10
CVE-2022-41880
2022-11-18 22:15:10
cnvd
cnvd
Google TensorFlow BaseCandidateSamplerOp buffer error vulnerability
2022-11-23 00:00:00
cbl_mariner
cbl_mariner
CVE-2022-41880 affecting package tensorflow for versions less than 2.11.0-1
2022-12-09 20:03:11
prion
prion
Design/Logic Flaw
2022-11-18 22:15:00
cvelist
cvelist
github
github
Tensorflow vulnerable to Out-of-Bounds Read
2022-11-22 00:10:10
nessus
nessus
CBL Mariner 2.0 Security Update: tensorflow (CVE-2022-41880)
2023-03-20 00:00:00
TensorFlow < 2.9.3 Multiple Vulnerabilities
2024-05-24 00:00:00
TensorFlow < 2.10.1 Multiple Vulnerabilities
2024-05-20 00:00:00
ibm
ibm
Security Bulletin: Multiple Vulnerabilities in CloudPak for Watson AIOPs
2022-12-15 03:09:07
6.6 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
44.3%
Related for OSV:BIT-TENSORFLOW-2022-41880