OtherHigh
CVE-2022-23592: Tensorflow is an Open Source Machine Learning Framework. TensorFlow's type inference can cause a hea…
- Occurred
- Feb 4, 2022
- Published
- Feb 4, 2022
- Source
- NVD CVE
Summary
Tensorflow is an Open Source Machine Learning Framework. TensorFlow's type inference can cause a heap out of bounds read as the bounds checking is done in a `DCHECK` (which is a no-op during production). An attacker can control the `input_idx` variable such that `ix` would be larger than the number of values in `node_t.args`. The fix will be included in TensorFlow 2.8.0. This is the only affected version.
Tags
- CVE
- CVE-2022-23592
- cvss:HIGH
Classification
Category confidence: 90%
Severity confidence: 90%
Rationale: CVE describes a memory safety vulnerability in TensorFlow framework, not an AI safety incident.
Classifier: Qwen/Qwen3.5-35B-A3B-FP8