Lucene search
GoogleOSV:BIT-TENSORFLOW-2022-41897HistoryMar 06, 2024 - 11:10 a.m.
BIT-tensorflow-2022-41897
2024-03-0611:10:45
Google
osv.dev
2
tensorflow
fractionmaxpoolgrad
crash fix
github commit
versions 2.8.4
2.9.3
2.10.1
2.11
TensorFlow is an open source platform for machine learning. If FractionMaxPoolGrad is given outsize inputs row_pooling_sequence and col_pooling_sequence, TensorFlow will crash. We have patched the issue in GitHub commit d71090c3e5ca325bdf4b02eb236cfb3ee823e927. The fix will be included in TensorFlow 2.11. We will also cherrypick this commit on TensorFlow 2.10.1, 2.9.3, and TensorFlow 2.8.4, as these are also affected and still in supported range.
| CPE | Name | Operator | Version |
|---|---|---|---|
| tensorflow | ge | 2.10.0 | |
| tensorflow | lt | 2.8.4 | |
| tensorflow | ge | 2.9.0 | |
| tensorflow | lt | 2.9.3 | |
| tensorflow | lt | 2.10.1 |
Related
osv
osv
`FractionalMaxPoolGrad` Heap out of bounds read
2022-11-21 21:54:04
CVE-2022-41897
2022-11-18 22:15:19
prion
prion
Stack overflow
2022-11-18 22:15:00
nessus
nessus
CBL Mariner 2.0 Security Update: tensorflow (CVE-2022-41897)
2023-03-20 00:00:00
TensorFlow < 2.9.3 Multiple Vulnerabilities
2024-05-24 00:00:00
TensorFlow < 2.10.1 Multiple Vulnerabilities
2024-05-20 00:00:00
cve
cve
CVE-2022-41897
2022-11-18 22:15:00
cvelist
cvelist
CVE-2022-41897 `FractionalMaxPoolGrad` Heap out of bounds read in Tensorflow
2022-11-18 00:00:00
cbl_mariner
cbl_mariner
CVE-2022-41897 affecting package tensorflow for versions less than 2.11.0-1
2022-12-09 20:03:11
github
github
`FractionalMaxPoolGrad` Heap out of bounds read
2022-11-21 21:54:04
cnvd
cnvd
Google TensorFlow buffer overflow vulnerability (CNVD-2023-15774)
2022-11-23 00:00:00
veracode
veracode
Denial Of Service (DoS)
2022-11-22 07:18:40
6.7 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
36.0%
Related for OSV:BIT-TENSORFLOW-2022-41897