Incorrect Type Conversion or Cast
CVE-2022-41911
Summary
TensorFlow is an open source platform for machine learning. When printing a tensor, we get it's data as a `const char*` array (since that's the underlying storage) and then we typecast it to the element type. However, conversions from `char` to `bool` are undefined if the `char` is not `0` or `1`, so sanitizers/fuzzers will crash. This issue affects versions prior to 2.8.4, 2.9.x prior to 2.9.3, 2.10.x prior to 2.10.1 and 2.11.x prior to 2.11.0-rc2.
- LOW
- NETWORK
- NONE
- UNCHANGED
- NONE
- NONE
- NONE
- HIGH
CWE-704 - Incorrect Type Conversion or Cast
The software does not correctly convert an object, resource, or structure from one type to a different type.
References
Advisory Timeline
- Published