OtherMedium
CVE-2022-29201: TensorFlow is an open source platform for machine learning. Prior to versions 2.9.0, 2.8.1, 2.7.2, a…
- Occurred
- May 20, 2022
- Published
- May 20, 2022
- Source
- NVD CVE
Summary
TensorFlow is an open source platform for machine learning. Prior to versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4, the implementation of `tf.raw_ops.QuantizedConv2D` does not fully validate the input arguments. In this case, references get bound to `nullptr` for each argument that is empty. Versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4 contain a patch for this issue.
Tags
- CVE
- CVE-2022-29201
- cvss:MEDIUM
Classification
Category confidence: 90%
Severity confidence: 85%
Rationale: CVE describes a software vulnerability in TensorFlow library, not an AI safety incident involving model behavior or deployment harm.
Classifier: Qwen/Qwen3.5-35B-A3B-FP8