Skip to main content

Out-of-bounds Write

CVE-2022-35939

High
9.8/10

Summary

TensorFlow is an open source platform for machine learning. The "ScatterNd" function takes an input argument that determines the indices of the output tensor. An input index greater than the output tensor or less than zero will either write content at the wrong index or trigger a crash. There are no known workarounds for this issue. This issue affects tensorflow versions 2.1.0rc0 through 2.7.3, 2.8.0rc0 through 2.8.2, and 2.9.0rc0 through 2.9.1.

  • LOW
  • NETWORK
  • HIGH
  • UNCHANGED
  • NONE
  • NONE
  • HIGH
  • HIGH

CWE-787 - Out-of-Bounds Write

Out-of-bounds write vulnerability is a memory access bug that allows software to write data past the end or before the beginning of the intended buffer. This may result in the corruption of data, a crash, or arbitrary code execution.

References

Advisory Timeline

  • Published