CVE-2022-23559

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2022-23559
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-23559.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2022-23559
Aliases
Downstream
Related
Published
2022-02-04T22:32:37Z
Modified
2026-07-22T02:24:01.851834Z
Severity
  • 8.8 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
Integer overflow in TFLite
Details

Tensorflow is an Open Source Machine Learning Framework. An attacker can craft a TFLite model that would cause an integer overflow in embedding lookup operations. Both embedding_size and lookup_size are products of values provided by the user. Hence, a malicious user could trigger overflows in the multiplication. In certain scenarios, this can then result in heap OOB read/write. Users are advised to upgrade to a patched version.

Database specific 
{
    "cna_assigner": "GitHub_M",
    "cwe_ids": [
        "CWE-190"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/23xxx/CVE-2022-23559.json"
}
References

Affected packages

Git / github.com/tensorflow/tensorflow

Affected ranges

Type
GIT
Repo
https://github.com/tensorflow/tensorflow
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
957590ea15cc03ee2e00fc61934647d54836676f
Introduced
919f693420e35d00c8d0a42100837ae3718f7927
Last affected
c2363d6d025981c661f8cbecf4c73ca7fbf38caf
Introduced
c256c071bb26e1e13b4666d1b3e229e110bc914a
Fixed
1de49725a5fc4e48f1a3b902ec3599ee99283043
Fixed
a4e401da71458d253b05e41f28637b65baf64be4
Fixed
f19be71717c497723ba0cea0379e84f061a75e01
Database specific 
{
    "cpe": [
        "cpe:2.3:a:google:tensorflow:*:*:*:*:*:*:*:*",
        "cpe:2.3:a:google:tensorflow:2.7.0:*:*:*:*:*:*:*"
    ],
    "source": [
        "CPE_RANGE",
        "CPE_STRING",
        "REFERENCES"
    ],
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.5.2"
        },
        {
            "introduced": "2.6.0"
        },
        {
            "last_affected": "2.6.2"
        },
        {
            "introduced": "2.7.0"
        },
        {
            "last_affected": "2.7.0"
        }
    ]
}

Affected versions

0.*
0.5.0
0.6.0
2.*
2.7.0
v1.*
v1.1.0-rc1
v1.1.0-rc2
v1.12.1
v1.6.0-rc1
v1.9.0-rc2
v2.*
v2.5.0
v2.5.0-rc0
v2.5.0-rc1
v2.5.0-rc2
v2.5.0-rc3
v2.5.1
v2.5.2
v2.6.0
v2.6.1
v2.6.2

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-23559.json"
vanir_signatures_modified 
"2026-07-22T02:24:01Z"
vanir_signatures 
[
    {
        "signature_version": "v1",
        "source": "https://github.com/tensorflow/tensorflow/commit/1de49725a5fc4e48f1a3b902ec3599ee99283043",
        "id": "CVE-2022-23559-281cdb68",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "85410680876681023327348856315031143994",
                "118497484770849856877827816462635179816",
                "261222415014871246788082841629542681827",
                "288183307539410504516238279694191301924",
                "262468463687526912784217008022405829118",
                "258157933775021897104311372734615095233",
                "35756995556457022631049588613881686442",
                "108442584805864087780077536743435776302",
                "160898141840311294805800293188428145049",
                "58689817718977518917601266415954439687",
                "127140459495285977855791762754393591377",
                "195688253077441444319022135064159611684",
                "89434140134287987042985141632157219290",
                "288133304646079082561514184151498000758",
                "263544599418810252358456655251941818977",
                "28239528415947317695363816025340138492",
                "120402029522907494518168043384376457563",
                "250195520794391626749903202438596963289",
                "210200570240247804766911365589233909591",
                "307092839802332632521347923403926744114",
                "42764055590011115367891909501749507650",
                "203083767272193713308268100115708345849",
                "91003048194182181921989643358043661671",
                "219281867380230976762677357419773085565",
                "3238702723619629991550887290556831627"
            ]
        },
        "target": {
            "file": "tensorflow/lite/kernels/embedding_lookup_sparse.cc"
        },
        "deprecated": false,
        "signature_type": "Line"
    },
    {
        "signature_version": "v1",
        "source": "https://github.com/tensorflow/tensorflow/commit/f19be71717c497723ba0cea0379e84f061a75e01",
        "id": "CVE-2022-23559-3cc378ff",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "126357828628371628422515171589031042514",
                "105607537601101828502655597360633401927",
                "181619973388847213322861090249573572549"
            ]
        },
        "target": {
            "file": "tensorflow/lite/util.h"
        },
        "deprecated": false,
        "signature_type": "Line"
    },
    {
        "signature_version": "v1",
        "source": "https://github.com/tensorflow/tensorflow/commit/f19be71717c497723ba0cea0379e84f061a75e01",
        "id": "CVE-2022-23559-510ea595",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "295484003531276308749297469168433552506",
                "210831907464118790597160967515834323580",
                "322714128051116894141039547984733768799",
                "324887642458684173600771625364455312679",
                "241283113168171870042066162980211488936",
                "92553759981212288368410437646081353801"
            ]
        },
        "target": {
            "file": "tensorflow/lite/util_test.cc"
        },
        "deprecated": false,
        "signature_type": "Line"
    },
    {
        "signature_version": "v1",
        "source": "https://github.com/tensorflow/tensorflow/commit/1de49725a5fc4e48f1a3b902ec3599ee99283043",
        "id": "CVE-2022-23559-8b1f00b6",
        "digest": {
            "length": 2655.0,
            "function_hash": "55152256114396208495445113108853950819"
        },
        "target": {
            "function": "Eval",
            "file": "tensorflow/lite/kernels/embedding_lookup_sparse.cc"
        },
        "deprecated": false,
        "signature_type": "Function"
    },
    {
        "signature_version": "v1",
        "source": "https://github.com/tensorflow/tensorflow/commit/a4e401da71458d253b05e41f28637b65baf64be4",
        "id": "CVE-2022-23559-99483e9b",
        "digest": {
            "length": 2860.0,
            "function_hash": "324398776744574836788412858557138394500"
        },
        "target": {
            "function": "Eval",
            "file": "tensorflow/lite/kernels/embedding_lookup_sparse.cc"
        },
        "deprecated": false,
        "signature_type": "Function"
    },
    {
        "signature_version": "v1",
        "source": "https://github.com/tensorflow/tensorflow/commit/a4e401da71458d253b05e41f28637b65baf64be4",
        "id": "CVE-2022-23559-ab10bb9c",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "171363148739880113058706704984352086650",
                "252619183282187386514825107465870696686",
                "190019041610687372375646668756202882464",
                "282308925462631533674194046577919812456",
                "85482977180241598679348490657841146475",
                "294296835792516136328025964725832774862",
                "124315077423236210543984979933027003862",
                "287614623608147654669429067757971974004"
            ]
        },
        "target": {
            "file": "tensorflow/lite/kernels/embedding_lookup_sparse.cc"
        },
        "deprecated": false,
        "signature_type": "Line"
    },
    {
        "signature_version": "v1",
        "source": "https://github.com/tensorflow/tensorflow/commit/f19be71717c497723ba0cea0379e84f061a75e01",
        "id": "CVE-2022-23559-b8d6eb34",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "205435682110525021304340706187361747346",
                "218525562072316164906181765876475931025",
                "206181148045709910831354288205920019401",
                "20337592559932583643066377864979157377",
                "60539056155937670293834546086908934017",
                "65693999343819619938901009823390586540",
                "106003119854278577671479212915727700800",
                "34124208798178803562111396154379182898",
                "101527969380753981937818074354726172289",
                "155811047823744060184448885197482044777",
                "194723390917787130513253012618565048323",
                "211986154655238734220606965585513972720",
                "292357186293567343288259480729542648965",
                "204934311464343260409863313871951636178"
            ]
        },
        "target": {
            "file": "tensorflow/lite/core/subgraph.cc"
        },
        "deprecated": false,
        "signature_type": "Line"
    },
    {
        "signature_version": "v1",
        "source": "https://github.com/tensorflow/tensorflow/commit/f19be71717c497723ba0cea0379e84f061a75e01",
        "id": "CVE-2022-23559-f62cba47",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "238264435780750279294674734304522482584",
                "30496652379376722579916170697673306539",
                "244531131187670267725259461949096189678",
                "69809224338130268163695306835384549802",
                "145670490621469593230805507834832916249",
                "39061592317627373221350757511261827631"
            ]
        },
        "target": {
            "file": "tensorflow/lite/util.cc"
        },
        "deprecated": false,
        "signature_type": "Line"
    }
]