PYSEC-2026-3114: Integer overflows in Tensorflow

Q: Which TensorFlow releases are known to be affected or receive a fix?

The issue is fixed in TensorFlow 2.8.0. TensorFlow 2.7.1, 2.6.3, and 2.5.3 are also affected, and the fix was planned to be cherry-picked to those supported releases.

Q: What input is required to trigger the denial of service?

An attacker needs the ability to provide tensor shapes to the AddManySparseToTensorsMap operation. Crafted dimensions can cause an integer overflow while constructing a large TensorShape, resulting in a CHECK assertion failure and process denial of service.

Q: What is the impact of successful exploitation?

Successful exploitation causes an assertion-failure denial of service. The provided severity vector indicates network attackability with low complexity and low privileges required, with no confidentiality or integrity impact.

Published Feb 3, 2022

Updated

Tensorflow is an Open Source Machine Learning Framework. The implementation of AddManySparseToTensorsMap is vulnerable to an integer overflow which results in a CHECK-fail when building new TensorShape objects (so, an assert failure based denial of service). We are missing some validation on the shapes of the input tensors as well as directly constructing a large TensorShape with user-provided dimensions. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range.

Affected Software

1 affected component

Google TensorFlow<2.5.3, >=2.6.0<2.6.3, >=2.7.0<2.7.1, >=2.8.0-rc0<2.8.0

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade TensorFlow to a version that resolves this vulnerability.
Fixed in 2.8.0
Upgrade
Upgrade TensorFlow to a version that resolves this vulnerability.
Fixed in 2.7.1
Upgrade
Upgrade TensorFlow to a version that resolves this vulnerability.
Fixed in 2.6.3
Upgrade
Upgrade TensorFlow to a version that resolves this vulnerability.
Fixed in 2.5.3

Event History

Feb 3, 2022

CVE Published

via OSV·11:42 AM

Data Sourced

via OSV·11:42 AM

DescriptionSeverity

Frequently Asked Questions

Which TensorFlow releases are known to be affected or receive a fix?

The issue is fixed in TensorFlow 2.8.0. TensorFlow 2.7.1, 2.6.3, and 2.5.3 are also affected, and the fix was planned to be cherry-picked to those supported releases.

What input is required to trigger the denial of service?

An attacker needs the ability to provide tensor shapes to the AddManySparseToTensorsMap operation. Crafted dimensions can cause an integer overflow while constructing a large TensorShape, resulting in a CHECK assertion failure and process denial of service.

What is the impact of successful exploitation?

Successful exploitation causes an assertion-failure denial of service. The provided severity vector indicates network attackability with low complexity and low privileges required, with no confidentiality or integrity impact.

PYSEC-2026-3114: Integer overflows in Tensorflow

Affected Software

Remediation

Event History

Frequently Asked Questions

Which TensorFlow releases are known to be affected or receive a fix?

What input is required to trigger the denial of service?

What is the impact of successful exploitation?

Company

Resources

Contact

Frequently Asked Questions

Which TensorFlow releases are known to be affected or receive a fix?

What input is required to trigger the denial of service?

What is the impact of successful exploitation?