BIT-tensorflow-2022-41901
See a problem?- Import Source
- https://github.com/bitnami/vulndb/tree/main/data/tensorflow/BIT-tensorflow-2022-41901.json
- JSON Data
- https://api.osv.dev/v1/vulns/BIT-tensorflow-2022-41901
- Aliases
- Published
- 2024-03-06T11:10:26.898Z
- Modified
- 2025-05-20T10:02:07.006Z
- Summary
- `CHECK_EQ` fail via input in `SparseMatrixNNZ` in Tensorflow
- Details
-
TensorFlow is an open source platform for machine learning. An input
sparse_matrixthat is not a matrix with a shape with rank 0 will trigger aCHECKfail intf.raw_ops.SparseMatrixNNZ. We have patched the issue in GitHub commit f856d02e5322821aad155dad9b3acab1e9f5d693. The fix will be included in TensorFlow 2.11. We will also cherrypick this commit on TensorFlow 2.10.1, 2.9.3, and TensorFlow 2.8.4, as these are also affected and still in supported range. - Database specific
{ "cpes": [ "cpe:2.3:a:google:tensorflow:*:*:*:*:*:*:*:*" ], "severity": "High" }- References
-
- https://github.com/tensorflow/tensorflow/blob/master/tensorflow/core/kernels/sparse/sparse_matrix.h
- https://github.com/tensorflow/tensorflow/commit/f856d02e5322821aad155dad9b3acab1e9f5d693
- https://github.com/tensorflow/tensorflow/security/advisories/GHSA-g9fm-r5mm-rf9f
- https://nvd.nist.gov/vuln/detail/CVE-2022-41901
Affected packages
Bitnami / tensorflow
Package
- Name
- tensorflow
- Purl
- pkg:bitnami/tensorflow
Severity
- 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator