Lucene search
GoogleOSV:BIT-TENSORFLOW-2022-41907HistoryMar 06, 2024 - 11:10 a.m.
BIT-tensorflow-2022-41907
2024-03-0611:10:16
Google
osv.dev
3
tensorflow
machine learning
overflow
patch
github commit
cherrypick
supported range
software
open source
TensorFlow is an open source platform for machine learning. When tf.raw_ops.ResizeNearestNeighborGrad is given a large size input, it overflows. We have patched the issue in GitHub commit 00c821af032ba9e5f5fa3fe14690c8d28a657624. The fix will be included in TensorFlow 2.11. We will also cherrypick this commit on TensorFlow 2.10.1, 2.9.3, and TensorFlow 2.8.4, as these are also affected and still in supported range.
| CPE | Name | Operator | Version |
|---|---|---|---|
| tensorflow | ge | 2.10.0 | |
| tensorflow | lt | 2.8.4 | |
| tensorflow | ge | 2.9.0 | |
| tensorflow | lt | 2.9.3 | |
| tensorflow | lt | 2.10.1 |
Related
veracode
veracode
Denial Of Service (DoS)
2022-11-22 12:31:58
prion
prion
Design/Logic Flaw
2022-11-18 22:15:00
osv
osv
CVE-2022-41907
2022-11-18 22:15:21
Overflow in `ResizeNearestNeighborGrad`
2022-11-21 22:04:27
cnvd
cnvd
Google TensorFlow buffer overflow vulnerability (CNVD-2022-80680)
2022-11-23 00:00:00
cve
cve
CVE-2022-41907
2022-11-18 22:15:00
nessus
nessus
CBL Mariner 2.0 Security Update: tensorflow (CVE-2022-41907)
2023-03-20 00:00:00
TensorFlow < 2.9.3 Multiple Vulnerabilities
2024-05-24 00:00:00
TensorFlow < 2.10.1 Multiple Vulnerabilities
2024-05-20 00:00:00
cvelist
cvelist
CVE-2022-41907 Overflow in `ResizeNearestNeighborGrad` in Tensorflow
2022-11-18 00:00:00
cbl_mariner
cbl_mariner
CVE-2022-41907 affecting package tensorflow for versions less than 2.11.0-1
2022-12-09 20:03:11
github
github
Overflow in `ResizeNearestNeighborGrad`
2022-11-21 22:04:27
6.6 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
36.0%
Related for OSV:BIT-TENSORFLOW-2022-41907