CVE-2022-29205: Segfault due to missing support for quantized types in TensorFlow
TensorFlow is an open source platform for machine learning. Prior to versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4, there is a potential for segfault / denial of service in TensorFlow by calling tf.compat.v1. ops which don't yet have support for quantized types, which was added after migration to TensorFlow 2.x. In these scenarios, since the kernel is missing, a nullptr value is passed to ParseDimensionValue for the pyvalue argument. Then, this is dereferenced, resulting in segfault. Versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4 contain a patch for this issue.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2022-29205?
CVE-2022-29205 has a medium severity rating due to its potential for causing segmentation faults and denial of service.
How do I fix CVE-2022-29205?
To fix CVE-2022-29205, upgrade TensorFlow to versions 2.9.0 or later, or to 2.8.1, 2.7.2, or 2.6.4.
What versions of TensorFlow are affected by CVE-2022-29205?
CVE-2022-29205 affects TensorFlow versions prior to 2.9.0, 2.8.1, 2.7.2, and 2.6.4.
What causes CVE-2022-29205 in TensorFlow?
CVE-2022-29205 is caused by the calling of `tf.compat.v1.*` operations that do not support quantized types.
Is CVE-2022-29205 remote exploitable?
CVE-2022-29205 is not directly remote exploitable as it requires specifically crafted input to trigger a segmentation fault.