OtherMedium
CVE-2022-29206: TensorFlow is an open source platform for machine learning. Prior to versions 2.9.0, 2.8.1, 2.7.2, a…
- Occurred
- May 20, 2022
- Published
- May 20, 2022
- Source
- NVD CVE
Summary
TensorFlow is an open source platform for machine learning. Prior to versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4, the implementation of `tf.raw_ops.SparseTensorDenseAdd` does not fully validate the input arguments. In this case, a reference gets bound to a `nullptr` during kernel execution. This is undefined behavior. Versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4 contain a patch for this issue.
Tags
- CVE
- CVE-2022-29206
- cvss:MEDIUM
Classification
Category confidence: 90%
Severity confidence: 85%
Rationale: Software vulnerability in TensorFlow library causing undefined behavior, not a direct AI safety incident.
Classifier: Qwen/Qwen3.5-35B-A3B-FP8