CVE-2022-41907 Overflow in `ResizeNearestNeighborGrad` in Tensorflow

TensorFlow is an open source platform for machine learning. When tf.rawops.ResizeNearestNeighborGrad is given a large size input, it overflows. We have patched the issue in GitHub commit 00c821af032ba9e5f5fa3fe14690c8d28a657624. The fix will be included in TensorFlow 2.11. We will also cherrypick...

PT-2022-26130

Name of the Vulnerable Software and Affected Versions TensorFlow versions prior to 2.11 TensorFlow versions 2.10.1 and earlier TensorFlow versions 2.9.3 and earlier TensorFlow versions 2.8.4 and earlier Description TensorFlow is an open source platform for machine learning. Inputs dense features ...

aggmap (>=1.1.1, <=1.2.1), molmap (>=1.3.1, <=1.4.0) potentially affected by CVE-2022-41896 via tensorflow-gpu (2.9.1)

tensorflow-gpu PYPI version 2.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow-gpu and may be impacted: - aggmap =1.1.1, =1.3.1, =1.4.0 Source cves: CVE-2022-41896 Source advisory: MEND:CVE-2022-41896...

aadhaar-detection (0.5.0), abba-python (>=0.1.6, <=0.3.0) +882 more potentially affected by CVE-2022-41885 via tensorflow (>=1.0.1, <=2.7.3)

tensorflow PYPI version =1.0.1, =0.1.6, =0.1.1, =1.0.1, =1.0.0, =1.2.0, =1.1.2, =0.0.1, =0.3.26, =1.1.5, =1.3.2 - ai-sudoku-solver 1.0.7 - aimodelshare 0.1.52 and more Source cves: CVE-2022-41885 Source advisory: MEND:CVE-2022-41885...

causalegm (>=0.2.1, <=0.2.5), chrombpnet (>=0.1.0, <=0.1.2) +3 more potentially affected by CVE-2022-41885 via tensorflow-gpu (2.8.0)

tensorflow-gpu PYPI version 2.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow-gpu and may be impacted: - causalegm =0.2.1, =0.1.0, =0.0.6, =2.3.5, =2.4.1 - tlaunch 0.0.2 Source cves: CVE-2022-41885 Source advisory: MEND:CVE-2022-41885...

PT-2022-26140

Name of the Vulnerable Software and Affected Versions TensorFlow versions prior to 2.11 TensorFlow versions 2.10.1, 2.9.3, and 2.8.4 Description TensorFlow is an open source platform for machine learning. An input encoded that is not a valid CompositeTensorVariant tensor will trigger a segfault i...

aggmap (>=1.1.1, <=1.2.1), molmap (>=1.3.1, <=1.4.0) potentially affected by CVE-2022-41899 via tensorflow-gpu (2.9.1)

tensorflow-gpu PYPI version 2.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow-gpu and may be impacted: - aggmap =1.1.1, =1.3.1, =1.4.0 Source cves: CVE-2022-41899 Source advisory: MEND:CVE-2022-41899...

aadhaar-detection (0.5.0), abba-python (>=0.1.6, <=0.3.0) +1016 more potentially affected by CVE-2022-41911 via tensorflow (>=1.0.1, <=2.8.3)

tensorflow PYPI version =1.0.1, =0.1.6, =0.1.1, =1.0.1, =1.0.0, =6.0.0, =1.2.0, =1.1.2, =0.0.1, =0.3.26, =1.1.5, =1.3.2 and more Source cves: CVE-2022-41911 Source advisory: MEND:CVE-2022-41911...

CVE-2022-41911 Invalid char to bool conversion when printing a tensor in Tensorflow

TensorFlow is an open source platform for machine learning. When printing a tensor, we get it's data as a const char array since that's the underlying storage and then we typecast it to the element type. However, conversions from char to bool are undefined if the char is not 0 or 1, so...

Google TensorFlow security vulnerabilities

Google TensorFlow, an end-to-end open source platform for machine learning from Google, Inc. is vulnerable to buffer overflow in versions prior to 2.8.4, 2.9.0 and later, 2.9.3 and later, 2.10.0 and later, and 2.10.1. The vulnerability stems from the fact that tf.rawops.TensorListResize is given ...

aadhaar-detection (0.5.0), abba-python (>=0.1.6, <=0.3.0) +1016 more potentially affected by CVE-2022-41880 via tensorflow (>=1.0.1, <=2.8.3)

tensorflow PYPI version =1.0.1, =0.1.6, =0.1.1, =1.0.1, =1.0.0, =6.0.0, =1.2.0, =1.1.2, =0.0.1, =0.3.26, =1.1.5, =1.3.2 and more Source cves: CVE-2022-41880 Source advisory: MEND:CVE-2022-41880...

CVE-2022-41895 `MirrorPadGrad` heap out of bounds read in Tensorflow

TensorFlow is an open source platform for machine learning. If MirrorPadGrad is given outsize input paddings, TensorFlow will give a heap OOB error. We have patched the issue in GitHub commit 717ca98d8c3bba348ff62281fdf38dcb5ea1ec92. The fix will be included in TensorFlow 2.11. We will also...

CVE-2022-41894

TensorFlow is an open source platform for machine learning. The reference kernel of the "CONV3DTRANSPOSE" TensorFlow Lite operator wrongly increments the dataptr when adding the bias to the result. Instead of "dataptr += numchannels;" it should be "dataptr += outputnumchannels;" as if the number ...

clip-jax (0.0.5), sdeper (>=1.1.0, <=1.6.1) potentially affected by CVE-2022-41909 via tensorflow-cpu (>=2.9.0, <=2.9.1)

tensorflow-cpu PYPI version =2.9.0, =1.1.0, =1.6.1 Source cves: CVE-2022-41909 Source advisory: MEND:CVE-2022-41909...

CVE-2022-41897 `FractionalMaxPoolGrad` Heap out of bounds read in Tensorflow

TensorFlow is an open source platform for machine learning. If FractionMaxPoolGrad is given outsize inputs rowpoolingsequence and colpoolingsequence, TensorFlow will crash. We have patched the issue in GitHub commit d71090c3e5ca325bdf4b02eb236cfb3ee823e927. The fix will be included in TensorFlow...

CVE-2022-41891: Improper Input Validation

TensorFlow is an open source platform for machine learning. If tf.rawops.TensorListConcat is given elementshape=, it results segmentation fault which can be used to trigger a denial of service attack. We have patched the issue in GitHub commit fc33f3dc4c14051a83eec6535b608abe1d355fde. The fix wil...

animl (>=1.1.2, <=1.1.4), arekit (>=0.21.0, <=0.22.1) +118 more potentially affected by CVE-2022-41899 via tensorflow-gpu (>=1.1.0, <=2.8.3)

tensorflow-gpu PYPI version =1.1.0, =1.1.2, =0.21.0, =0.23.0, =0.9.2, =0.0.1, =0.0.9, =0.1.0, =1.0.0, =0.2.1, =0.1.0, =0.1.2 - classitransformers 0.0.1 and more Source cves: CVE-2022-41899 Source advisory: MEND:CVE-2022-41899...

cifar-10-model (7.4.0), neuroutils (>=0.1.3, <=0.2.3) +1 more potentially affected by CVE-2022-41907 via tensorflow-cpu (2.10.0)

tensorflow-cpu PYPI version 2.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow-cpu and may be impacted: - cifar-10-model 7.4.0 - neuroutils =0.1.3, =0.3.0.dev221212, =0.4.0.dev230202 Source cves: CVE-2022-41907 Source advisory:...

animl (>=1.1.2, <=1.1.4), arekit (>=0.21.0, <=0.22.1) +118 more potentially affected by CVE-2022-41907 via tensorflow-gpu (>=1.1.0, <=2.8.3)

tensorflow-gpu PYPI version =1.1.0, =1.1.2, =0.21.0, =0.23.0, =0.9.2, =0.0.1, =0.0.9, =0.1.0, =1.0.0, =0.2.1, =0.1.0, =0.1.2 - classitransformers 0.0.1 and more Source cves: CVE-2022-41907 Source advisory: MEND:CVE-2022-41907...

clip-jax (0.0.5) potentially affected by CVE-2022-41885 via tensorflow-cpu (2.9.0)

tensorflow-cpu PYPI version 2.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow-cpu and may be impacted: - clip-jax 0.0.5 Source cves: CVE-2022-41885 Source advisory: MEND:CVE-2022-41885...