CVE-2022-35981

TensorFlow is an open source platform for machine learning. FractionalMaxPoolGrad validates its inputs with CHECK failures instead of with returning errors. If it gets incorrectly sized inputs, the CHECK failure can be used to trigger a denial of service attack. We have patched the issue in GitHu...

CVE-2022-35981

TensorFlow’s FractionalMaxPoolGrad vulnerability (CVE-2022-35981) stems from input validation using CHECK failures instead of proper error handling, enabling a potential denial of service when inputs are incorrectly sized. A fix is available via commit 8741e57d163a079db05a7107a7609af70931def4, an...

CVE-2022-35981 `CHECK` fail in `FractionalMaxPoolGrad` in TensorFlow

TensorFlow is an open source platform for machine learning. FractionalMaxPoolGrad validates its inputs with CHECK failures instead of with returning errors. If it gets incorrectly sized inputs, the CHECK failure can be used to trigger a denial of service attack. We have patched the issue in GitHu...