PYSEC-2026-3201: `CHECK` fail via inputs in `SparseFillEmptyRowsGrad` in Tensorflow

Q: Which TensorFlow versions should be treated as affected?

The issue is fixed in TensorFlow 2.11. TensorFlow 2.10.1, 2.9.3, and 2.8.4 are identified as affected supported versions that were to receive the fix via cherrypick.

Q: What conditions are required to trigger the crash?

An attacker or workload must be able to supply empty inputs to the SparseFillEmptyRowsGrad operation. The vector indicates network access, low privileges, high attack complexity, and required user interaction.

Q: What is the impact of successful exploitation?

Supplying the affected empty inputs causes TensorFlow to crash, resulting in a denial of service. No confidentiality or integrity impact is indicated.

Q: What can be done if upgrading is not immediately possible?

Avoid passing empty inputs to SparseFillEmptyRowsGrad until the applicable fix is deployed. The published fix is commit af4a6a3c8b95022c351edae94560acc61253a1b8.

Published Nov 18, 2022

Updated

TensorFlow is an open source platform for machine learning. If SparseFillEmptyRowsGrad is given empty inputs, TensorFlow will crash. We have patched the issue in GitHub commit af4a6a3c8b95022c351edae94560acc61253a1b8. The fix will be included in TensorFlow 2.11. We will also cherrypick this commit on TensorFlow 2.10.1, 2.9.3, and TensorFlow 2.8.4, as these are also affected and still in supported range.

Affected Software

1 affected component

Google TensorFlow>=2.8.0<2.8.4, >=2.9.0<2.9.3, >=2.10.0<2.10.1, <2.11.0

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 2.11
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 2.10.1Patch af4a6a3c8b95022c351edae94560acc61253a1b8
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 2.9.3Patch af4a6a3c8b95022c351edae94560acc61253a1b8
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 2.8.4Patch af4a6a3c8b95022c351edae94560acc61253a1b8

Event History

Nov 18, 2022

CVE Published

via OSV·12:00 AM

Data Sourced

via OSV·12:00 AM

DescriptionSeverityWeakness

Frequently Asked Questions

Which TensorFlow versions should be treated as affected?

The issue is fixed in TensorFlow 2.11. TensorFlow 2.10.1, 2.9.3, and 2.8.4 are identified as affected supported versions that were to receive the fix via cherrypick.

What conditions are required to trigger the crash?

An attacker or workload must be able to supply empty inputs to the SparseFillEmptyRowsGrad operation. The vector indicates network access, low privileges, high attack complexity, and required user interaction.

What is the impact of successful exploitation?

Supplying the affected empty inputs causes TensorFlow to crash, resulting in a denial of service. No confidentiality or integrity impact is indicated.

What can be done if upgrading is not immediately possible?

Avoid passing empty inputs to SparseFillEmptyRowsGrad until the applicable fix is deployed. The published fix is commit af4a6a3c8b95022c351edae94560acc61253a1b8.

PYSEC-2026-3201: `CHECK` fail via inputs in `SparseFillEmptyRowsGrad` in Tensorflow

Affected Software

Remediation

Event History

Frequently Asked Questions

Which TensorFlow versions should be treated as affected?

What conditions are required to trigger the crash?

What is the impact of successful exploitation?

What can be done if upgrading is not immediately possible?

Company

Resources

Contact

Frequently Asked Questions

Which TensorFlow versions should be treated as affected?

What conditions are required to trigger the crash?

What is the impact of successful exploitation?

What can be done if upgrading is not immediately possible?