Skip to content
OtherMedium

CVE-2022-21734: Tensorflow is an Open Source Machine Learning Framework. The implementation of `MapStage` is vulnera…

Occurred
Feb 3, 2022
Published
Feb 3, 2022
Source
NVD CVE

Summary

Tensorflow is an Open Source Machine Learning Framework. The implementation of `MapStage` is vulnerable a `CHECK`-fail if the key tensor is not a scalar. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range.

Tags

  • CVE
  • CVE-2022-21734
  • cvss:MEDIUM

Classification

Category confidence: 90%
Severity confidence: 85%

Rationale: Software vulnerability in TensorFlow framework causing CHECK failure, not a safety incident involving AI harm or misuse.

Classifier: Qwen/Qwen3.5-35B-A3B-FP8

Visit source