OtherMedium
CVE-2022-29205: TensorFlow is an open source platform for machine learning. Prior to versions 2.9.0, 2.8.1, 2.7.2, a…
- Occurred
- May 20, 2022
- Published
- May 20, 2022
- Source
- NVD CVE
Summary
TensorFlow is an open source platform for machine learning. Prior to versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4, there is a potential for segfault / denial of service in TensorFlow by calling `tf.compat.v1.*` ops which don't yet have support for quantized types, which was added after migration to TensorFlow 2.x. In these scenarios, since the kernel is missing, a `nullptr` value is passed to `ParseDimensionValue` for the `py_value` argument. Then, this is dereferenced, resulting in segfault. Versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4 contain a patch for this issue.
Tags
- CVE
- CVE-2022-29205
- cvss:MEDIUM
Classification
Category confidence: 90%
Severity confidence: 85%
Rationale: CVE describes a software vulnerability causing segfault/DoS in TensorFlow, not an AI safety incident.
Classifier: Qwen/Qwen3.5-35B-A3B-FP8