`MirrorPadGrad` heap out of bounds read

高 7.5CVE-2022-41895 · BIT-tensorflow-2022-41895 · GHSA-gq2j-cr96-gvqx · 18/11/2022 公開 · 17/06/2026 更新

要点

CVE-2022-41895 は tensorflow, tensorflow-cpu, tensorflow-gpu に影響する深刻度「高」 (CVSS 7.5) の脆弱性です。
今後30日間に悪用される確率（EPSS）：0.49%（全脆弱性の 42.6% より高い）。
対処：2.10.1, 2.9.3, 2.8.4 以降に更新してください。

パッケージ	影響を受けるバージョン	修正済みバージョン
tensorflow PyPI	`≥ 2.10.0, < 2.10.1≥ 2.9.0, < 2.9.3< 2.8.4`	`2.10.12.9.32.8.4`
tensorflow-cpu PyPI	`≥ 2.10.0, < 2.10.1≥ 2.9.0, < 2.9.3< 2.8.4`	`2.10.12.9.32.8.4`
tensorflow-gpu PyPI	`≥ 2.10.0, < 2.10.1≥ 2.9.0, < 2.9.3< 2.8.4`	`2.10.12.9.32.8.4`
tensorflow google	`≥ 2.10.0, < 2.10.1≥ 2.9.0, < 2.9.3< 2.8.4`	`2.10.12.9.32.8.4`

概要

Impact

If MirrorPadGrad is given outsize input paddings, TensorFlow will give a heap OOB error.

import tensorflow as tf
tf.raw_ops.MirrorPadGrad(input=[1],
             paddings=[[0x77f00000,0xa000000]],
             mode = 'REFLECT')

Patches

We have patched the issue in GitHub commit 717ca98d8c3bba348ff62281fdf38dcb5ea1ec92.

The fix will be included in TensorFlow 2.11. We will also cherrypick this commit on TensorFlow 2.10.1, 2.9.3, and TensorFlow 2.8.4, as these are also affected and still in supported range.

For more information

Please consult our security guide for more information regarding the security model and how to contact us with issues and questions.

Attribution

This vulnerability has been reported by Vul AI.

NVD の説明

TensorFlow is an open source platform for machine learning. If `MirrorPadGrad` is given outsize input `paddings`, TensorFlow will give a heap OOB error. We have patched the issue in GitHub commit 717ca98d8c3bba348ff62281fdf38dcb5ea1ec92. The fix will be included in TensorFlow 2.11. We will also cherrypick this commit on TensorFlow 2.10.1, 2.9.3, and TensorFlow 2.8.4, as these are also affected and still in supported range.

参考情報

tensorflow/tensorflow security advisory · WEB
nvd.nist.gov/vuln/detail/CVE-2022-41895 · ADVISORY
tensorflow/tensorflow commit 717ca98 · WEB
tensorflow/tensorflow · PACKAGE
tensorflow/tensorflow · WEB
pypi.org/project/tensorflow-gpu · PACKAGE
GitHub Advisory GHSA-gq2j-cr96-gvqx · ADVISORY
pypi.org/project/tensorflow · PACKAGE
pypi.org/project/tensorflow-cpu · PACKAGE

tensorflow のその他の脆弱性

すべて見る →

これらの製品をお使いですか？サイトをスキャンして、脆弱なバージョンが公開されていないか確認しましょう。

無料でサイトをスキャン

パッケージ

影響を受けるバージョン

修正済みバージョン

tensorflow

PyPI

≥ 2.10.0, < 2.10.1≥ 2.9.0, < 2.9.3< 2.8.4

2.10.12.9.32.8.4

tensorflow-cpu

PyPI

≥ 2.10.0, < 2.10.1≥ 2.9.0, < 2.9.3< 2.8.4

2.10.12.9.32.8.4

tensorflow-gpu

PyPI

≥ 2.10.0, < 2.10.1≥ 2.9.0, < 2.9.3< 2.8.4

2.10.12.9.32.8.4

tensorflow

google

≥ 2.10.0, < 2.10.1≥ 2.9.0, < 2.9.3< 2.8.4

2.10.12.9.32.8.4

概要

Impact

If MirrorPadGrad is given outsize input paddings, TensorFlow will give a heap OOB error.

import tensorflow as tf
tf.raw_ops.MirrorPadGrad(input=[1],
             paddings=[[0x77f00000,0xa000000]],
             mode = 'REFLECT')

Patches

We have patched the issue in GitHub commit 717ca98d8c3bba348ff62281fdf38dcb5ea1ec92.

The fix will be included in TensorFlow 2.11. We will also cherrypick this commit on TensorFlow 2.10.1, 2.9.3, and TensorFlow 2.8.4, as these are also affected and still in supported range.

For more information

Please consult our security guide for more information regarding the security model and how to contact us with issues and questions.

Attribution

This vulnerability has been reported by Vul AI.

NVD の説明

tensorflow のその他の脆弱性

すべて見る →