Skip to content
CVE PROGRAM SOURCE RECORD5.5 Medium

CVE-2022-29209

Type confusion leading to `CHECK`-failure based denial of service in TensorFlow

Description

TensorFlow is an open source platform for machine learning. Prior to versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4, the macros that TensorFlow uses for writing assertions (e.g., `CHECK_LT`, `CHECK_GT`, etc.) have an incorrect logic when comparing `size_t` and `int` values. Due to type conversion rules, several of the macros would trigger incorrectly. Versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4 contain a patch for this issue.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

tensorflow tensorflow

  • < 2.6.4affected
  • >= 2.7.0rc0, < 2.7.2affected
  • >= 2.8.0rc0, < 2.8.1affected
  • >= 2.9.0rc0, < 2.9.0affected

References