CVE-2022-29207

Summary

TensorFlow is an open source platform for machine learning. Prior to versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4, multiple TensorFlow operations misbehave in eager mode when the resource handle provided to them is invalid. In graph mode, it would have been impossible to perform these API calls, but migration to TF 2.x eager mode opened up this vulnerability. If the resource handle is empty, then a reference is bound to a null pointer inside TensorFlow codebase (various codepaths). This is undefined behavior. Versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4 contain a patch for this issue.

Affected Software

VendorProductVersion RangeStatus
tensorflowtensorflow< 2.6.4affected
tensorflowtensorflow>= 2.7.0rc0, < 2.7.2affected
tensorflowtensorflow>= 2.8.0rc0, < 2.8.1affected
tensorflowtensorflow>= 2.9.0rc0, < 2.9.0affected

Weaknesses

  • CWE-20: CWE-20: Improper Input Validation
  • CWE-475: CWE-475: Undefined Behavior for Input to API

ADP Enrichment

CVE Program Container

Additional References

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: poc
    • Automatable: no
    • Technical Impact: partial

References