Skip to content
OtherMedium

CVE-2022-29209: TensorFlow is an open source platform for machine learning. Prior to versions 2.9.0, 2.8.1, 2.7.2, a…

Occurred
May 21, 2022
Published
May 21, 2022
Source
NVD CVE

Summary

TensorFlow is an open source platform for machine learning. Prior to versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4, the macros that TensorFlow uses for writing assertions (e.g., `CHECK_LT`, `CHECK_GT`, etc.) have an incorrect logic when comparing `size_t` and `int` values. Due to type conversion rules, several of the macros would trigger incorrectly. Versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4 contain a patch for this issue.

Tags

  • CVE
  • CVE-2022-29209
  • cvss:MEDIUM

Classification

Category confidence: 90%
Severity confidence: 85%

Rationale: CVE describes a logic bug in TensorFlow assertion macros causing incorrect behavior, not a safety incident involving AI harm or misuse.

Classifier: Qwen/Qwen3.5-35B-A3B-FP8

Visit source