CVE-2022-21738: Integer overflow leading to crash in Tensorflow
Impact The implementation of SparseCountSparseOutput can be made to crash a TensorFlow process by an integer overflow whose result is then used in a memory allocation:
python import tensorflow as tf import numpy as np tf.rawops.SparseCountSparseOutput( indices=[[1,1]], values=[2], denseshape=[2 31, 2 32], weights=[1], binaryoutput=True, minlength=-1, maxlength=-1, name=None)
Patches We have patched the issue in GitHub commit 6f4d3e8139ec724dbbcb40505891c81dd1052c4a.
The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range.
For more information Please consult our security guide for more information regarding the security model and how to contact us with issues and questions.
Attribution This vulnerability has been reported by Faysal Hossain Shezan from University of Virginia.
Other sources
Tensorflow is an Open Source Machine Learning Framework. The implementation of SparseCountSparseOutput can be made to crash a TensorFlow process by an integer overflow whose result is then used in a memory allocation. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2022-21738?
CVE-2022-21738 has been classified as a high severity vulnerability due to its impact on system stability.
How do I fix CVE-2022-21738?
To mitigate CVE-2022-21738, upgrade TensorFlow to version 2.7.1 or later.
What versions of TensorFlow are affected by CVE-2022-21738?
CVE-2022-21738 affects TensorFlow versions prior to 2.7.1, including those between 2.5.2 and 2.6.2.
What systems are at risk from CVE-2022-21738?
Any system running the vulnerable versions of TensorFlow, particularly those utilizing the `SparseCountSparseOutput` function, is at risk.
What type of vulnerability is CVE-2022-21738?
CVE-2022-21738 is an integer overflow vulnerability that can lead to the crashing of a TensorFlow process.