Skip to main content

Out-of-bounds Write

CVE-2022-29208

High
7.1/10

Summary

TensorFlow is an open source platform for machine learning. Versions prior to 2.6.4, 2.7.x prior to 2.7.2, 2.8.x prior to 2.8.1, and 2.9.x prior to 2.9.0rc2, the implementation of `tf.raw_ops.EditDistance` has incomplete validation. Users can pass negative values to cause a segmentation fault based denial of service. In multiple places throughout the code, one may compute an index for a write operation. However, the existing validation only checks against the upper bound of the array. Hence, it is possible to write before the array by massaging the input to generate negative values for `loc`. Versions 2.9.0rc2, 2.8.1, 2.7.2, and 2.6.4 contain a patch for this issue.

  • LOW
  • LOCAL
  • HIGH
  • UNCHANGED
  • NONE
  • LOW
  • NONE
  • HIGH

CWE-787 - Out-of-Bounds Write

Out-of-bounds write vulnerability is a memory access bug that allows software to write data past the end or before the beginning of the intended buffer. This may result in the corruption of data, a crash, or arbitrary code execution.

References

Advisory Timeline

  • Published