CVE-2022-23572CWE-754

Crash when type cannot be specialized in Tensorflow

Medium · published February 4, 2022

CVSS v3.1
6.5
EPSS
1%
Percentile
62.5
In the wild
Unconfirmed
What it is

Tensorflow is an Open Source Machine Learning Framework. Under certain scenarios, TensorFlow can fail to specialize a type during shape inference. This case is covered by the `DCHECK` function however, `DCHECK` is a no-op in production builds and an assertion failure in debug builds. In the first case execution proceeds to the `ValueOrDie` line. This results in an assertion failure as `ret` contains an error `Status`, not a value. In the second case we also get a crash due to the assertion failure. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, and TensorFlow 2.6.3, as these are also affected and still in supported range.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.01000 · 62.5th percentile
Weakness
CWE-754 · Improper Check for Unusual or Exceptional Conditions
Published
2022-02-04T22:32Z
EPSS history
Timeline
  • 04 FEB 22:32Z
    Crash when type cannot be specialized in Tensorflow
    cvelistv5