PYSEC-2026-1035 `tf.raw_ops.Mfcc` crashes

🗓️ 07 Jul 2026 10:17:24Reported by GoogleType

osv🔗 osv.dev👁 3 Views

tf.raw_ops.Mfcc crashes if filterbank_channel_count is too large; fix in TensorFlow 2.11 and cherry-picked to older releases.

Reporter	Title	Published	Views	Family All 40
ibm	Security Bulletin: IBM Watson Assistant for IBM Cloud Pak for Data is vulnerable to multiple vulerabilities in TensorFlow	6 Jul 202317:53	–	ibm
ibm	Security Bulletin: IBM Watson Discovery Cartridge for IBM Cloud Pak for Data affected by vulnerability in TensorFlow	30 Jan 202317:17	–	ibm
ibm	Security Bulletin: Multiple Security Vulnerabilities may affect IBM Robotic Process Automation for Cloud Pak.	2 Feb 202303:37	–	ibm
ibm	Security Bulletin: tensorflow-2.7.3-cp37 vulnerable to CVE-2022-41911 CVE-2022-41907 CVE-2022-41908 CVE-2022-41896 CVE-2022-41891 CVE-2022-41894 CVE-2022-41884 IBM Maximo Application Suite - Monitor Component	6 Jun 202321:17	–	ibm
cbl_mariner	CVE-2022-41896 affecting package tensorflow for versions less than 2.11.0-1	9 Dec 202220:03	–	cbl_mariner
cnnvd	Google TensorFlow 输入验证错误漏洞	18 Nov 202200:00	–	cnnvd
cnvd	Google TensorFlow Input Validation Error Vulnerability (CNVD-2023-15781)	23 Nov 202200:00	–	cnvd
cve	CVE-2022-41896	18 Nov 202200:00	–	cve
cvelist	CVE-2022-41896 `tf.raw_ops.Mfcc` crashes in Tensorflow	18 Nov 202200:00	–	cvelist
debiancve	CVE-2022-41896	18 Nov 202200:00	–	debiancve

Source	Link
github	www.github.com/tensorflow/tensorflow/security/advisories/GHSA-rmg2-f698-wq35
nvd	www.nvd.nist.gov/vuln/detail/CVE-2022-41896
github	www.github.com/tensorflow/tensorflow/commit/39ec7eaf1428e90c37787e5b3fbd68ebd3c48860
github	www.github.com/tensorflow/tensorflow
github	www.github.com/tensorflow/tensorflow/blob/master/tensorflow/core/kernels/image/mirror_pad_op.cc
pypi	www.pypi.org/project/tensorflow-gpu
github	www.github.com/advisories/GHSA-rmg2-f698-wq35

13 Jul 2026 16:43Current

7High risk

Vulners AI Score7

CVSS 3.14.8

EPSS0.0044