Lucene search
GoogleOSV:CVE-2022-23590HistoryFeb 04, 2022 - 11:15 p.m.
CVE-2022-23590
2022-02-0423:15:15
Google
osv.dev
7
tensorflow
savedmodel
graphdef
manipulation
vulnerability
github
commits
versions
EPSS
0.002
Percentile
57.4%
Tensorflow is an Open Source Machine Learning Framework. A GraphDef from a TensorFlow SavedModel can be maliciously altered to cause a TensorFlow process to crash due to encountering a StatusOr value that is an error and forcibly extracting the value from it. We have patched the issue in multiple GitHub commits and these will be included in TensorFlow 2.8.0 and TensorFlow 2.7.1, as both are affected.
Related
cnvd
cnvd
Google Tensorflow code issue vulnerability (NVD-C-2022-117042)
2022-02-09 00:00:00
osv
osv
Crash due to erroneous `StatusOr` in TensorFlow
2022-02-09 23:29:38
PYSEC-2022-99
2022-02-04 23:15:00
PYSEC-2022-154
2022-02-04 23:15:00
cvelist
cvelist
CVE-2022-23590 Crash due to erroneous `StatusOr` in Tensorflow
2022-02-04 22:32:10
nvd
nvd
CVE-2022-23590
2022-02-04 23:15:15
prion
prion
Stack overflow
2022-02-04 23:15:00
github
github
Crash due to erroneous `StatusOr` in TensorFlow
2022-02-09 23:29:38
cve
cve
CVE-2022-23590
2022-02-04 23:15:15
veracode
veracode
Denial Of Service (DoS)
2022-02-08 04:24:23
