CVE-2022-23581mediumCWE-617

CVE-2022-23581: medium-severity vulnerability in tensorflow

`CHECK`-failures during Grappler's `IsSimplifiableReshape` in Tensorflow

Published · Updated

Follow this CVE+ Monitor tensorflow+ Monitor tensorflow

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 6.5epss 1.2%
In short

TensorFlow's Grappler optimizer crashes when processing specially modified model files, causing the application to stop working. This allows an attacker with a modified model file to disrupt service.

Technical detail

A CHECK assertion failure in the IsSimplifiableReshape function of Grappler optimizer can be triggered by a malformed SavedModel, leading to denial of service. The attack requires the ability to supply or alter a SavedModel file before it is loaded and optimized by TensorFlow's Grappler component.

Summary generated and translated by AI from the official description.
Tensorflow is an Open Source Machine Learning Framework. The Grappler optimizer in TensorFlow can be used to cause a denial of service by altering a `SavedModel` such that `IsSimplifiableReshape` would trigger `CHECK` failures. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Affected products
tensorflow · tensorflow
Related CVEs — tensorflow

In the same product, most dangerous first.

CVE-2020-15202CRITICALInteger truncation in Shard API usageEPSS 1.3%CVE-2020-15207HIGHSegfault and data corruption in tensorflow-liteEPSS 1.2%CVE-2022-23559HIGHInteger overflow in TFLiteEPSS 1.2%CVE-2022-23589MEDIUMNull pointer dereference in Grappler's `IsConstant` in TensorflowEPSS 1.1%CVE-2020-15205CRITICALData leak in TensorflowEPSS 1.0%CVE-2020-15194MEDIUMDenial of Service in TensorflowEPSS 1.0%