OtherMedium
CVE-2022-23566: Tensorflow is an Open Source Machine Learning Framework. TensorFlow is vulnerable to a heap OOB writ…
- Occurred
- Feb 4, 2022
- Published
- Feb 4, 2022
- Source
- NVD CVE
Summary
Tensorflow is an Open Source Machine Learning Framework. TensorFlow is vulnerable to a heap OOB write in `Grappler`. The `set_output` function writes to an array at the specified index. Hence, this gives a malicious user a write primitive. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range.
Tags
- CVE
- CVE-2022-23566
- cvss:HIGH
Classification
Category confidence: 90%
Severity confidence: 85%
Rationale: CVE describes a memory corruption vulnerability in TensorFlow framework, not an AI safety incident.
Classifier: Qwen/Qwen3.5-35B-A3B-FP8