CVE-2022-41911: Invalid char to bool conversion when printing a tensor in Tensorflow
TensorFlow is an open source platform for machine learning. When printing a tensor, we get it's data as a const char array (since that's the underlying storage) and then we typecast it to the element type. However, conversions from char to bool are undefined if the char is not 0 or 1, so sanitizers/fuzzers will crash. The issue has been patched in GitHub commit 1be74370327. The fix will be included in TensorFlow 2.11.0. We will also cherrypick this commit on TensorFlow 2.10.1, TensorFlow 2.9.3, and TensorFlow 2.8.4, as these are also affected and still in supported range.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch 1be74370327 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 2.11.0Patch 1be74370327 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 2.10.1Patch 1be74370327 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 2.9.3Patch 1be74370327 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 2.8.4Patch 1be74370327
Event History
Frequently Asked Questions
What is the vulnerability ID of this TensorFlow vulnerability?
The vulnerability ID is CVE-2022-41911.
What is the severity of CVE-2022-41911?
The severity of CVE-2022-41911 is high.
Which software versions are affected by CVE-2022-41911?
Google TensorFlow versions up to 2.8.4, versions from 2.9.0 to 2.9.3, and version 2.10.0 are affected by CVE-2022-41911.
What is the CWE ID associated with CVE-2022-41911?
The CWE ID associated with CVE-2022-41911 is CWE-704.
Can you provide some references for CVE-2022-41911?
Sure, here are some references for CVE-2022-41911: [GitHub Link 1](https://github.com/tensorflow/tensorflow/blob/807cae8a807960fd7ac2313cde73a11fc15e7942/tensorflow/core/framework/tensor.cc#L1200-L1227), [GitHub Link 2](https://github.com/tensorflow/tensorflow/commit/1be743703279782a357adbf9b77dcb994fe8b508), [Security Advisory](https://github.com/tensorflow/tensorflow/security/advisories/GHSA-pf36-r9c6-h97j).