VulnerabilityModified
CVE-2022-29209
TensorFlow is an open source platform for machine learning.
MEDIUM 5.5EPSS 0.39%
Does this matter?
Lower severity and a low EPSS score (0.39%). Track it; it rarely justifies an emergency change on its own.
Description
TensorFlow is an open source platform for machine learning. Prior to versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4, the macros that TensorFlow uses for writing assertions (e.g., `CHECK_LT`, `CHECK_GT`, etc.) have an incorrect logic when comparing `size_t` and `int` values. Due to type conversion rules, several of the macros would trigger incorrectly. Versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4 contain a patch for this issue.
- CVSS 3.1
- 5.5 MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- EPSS
- 0.39% probability · 32th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-843
- Affected
- google/tensorflow
- Source
- security-advisories@github.com
References
- https://github.com/tensorflow/tensorflow/blob/f3b9bf4c3c0597563b289c0512e98d4ce81f886e/tensorflow/core/platform/default/logging.hThird Party Advisory
- https://github.com/tensorflow/tensorflow/commit/b917181c29b50cb83399ba41f4d938dc369109a1Patch, Third Party Advisory
- https://github.com/tensorflow/tensorflow/issues/55530Exploit, Issue Tracking, Third Party Advisory
- https://github.com/tensorflow/tensorflow/pull/55730Exploit, Issue Tracking, Patch, Third Party Advisory
- https://github.com/tensorflow/tensorflow/releases/tag/v2.6.4Release Notes, Third Party Advisory
- https://github.com/tensorflow/tensorflow/releases/tag/v2.7.2Release Notes, Third Party Advisory
- https://github.com/tensorflow/tensorflow/releases/tag/v2.8.1Release Notes, Third Party Advisory
- https://github.com/tensorflow/tensorflow/releases/tag/v2.9.0Release Notes, Third Party Advisory
- https://github.com/tensorflow/tensorflow/security/advisories/GHSA-f4rr-5m7v-wxcwExploit, Patch, Third Party Advisory
- https://github.com/tensorflow/tensorflow/blob/f3b9bf4c3c0597563b289c0512e98d4ce81f886e/tensorflow/core/platform/default/logging.hThird Party Advisory
- https://github.com/tensorflow/tensorflow/commit/b917181c29b50cb83399ba41f4d938dc369109a1Patch, Third Party Advisory
- https://github.com/tensorflow/tensorflow/issues/55530Exploit, Issue Tracking, Third Party Advisory
- https://github.com/tensorflow/tensorflow/pull/55730Exploit, Issue Tracking, Patch, Third Party Advisory
- https://github.com/tensorflow/tensorflow/releases/tag/v2.6.4Release Notes, Third Party Advisory
- https://github.com/tensorflow/tensorflow/releases/tag/v2.7.2Release Notes, Third Party Advisory
- https://github.com/tensorflow/tensorflow/releases/tag/v2.8.1Release Notes, Third Party Advisory
- https://github.com/tensorflow/tensorflow/releases/tag/v2.9.0Release Notes, Third Party Advisory
- https://github.com/tensorflow/tensorflow/security/advisories/GHSA-f4rr-5m7v-wxcwExploit, Patch, Third Party Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.