Skip to main content

Improper Input Validation

CVE-2022-36027

High
7.5/10

Summary

TensorFlow is an open source platform for machine learning. When converting transposed convolutions using per-channel weight quantization the converter segfaults and crashes the Python process. The fix will be included in TensorFlow 2.10.0. There are no known workarounds for this issue. This issue affects TensorFlow versions prior to v2.10.0-rc0.

  • LOW
  • NETWORK
  • NONE
  • UNCHANGED
  • NONE
  • NONE
  • NONE
  • HIGH

CWE-20 - Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References

Advisory Timeline

  • Published