CVE-2022-29201
- Source
- https://cve.org/CVERecord?id=CVE-2022-29201
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-29201.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2022-29201
- Aliases
- Published
- 2022-05-20T23:00:15Z
- Modified
- 2026-08-12T13:00:56.450782Z
- Severity
-
- 5.5 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
- Summary
- Missing validation in `QuantizedConv2D` results in undefined behavior in TensorFlow
- Details
-
TensorFlow is an open source platform for machine learning. Prior to versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4, the implementation of
tf.raw_ops.QuantizedConv2Ddoes not fully validate the input arguments. In this case, references get bound tonullptrfor each argument that is empty. Versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4 contain a patch for this issue. - Database specific
{ "cwe_ids": [ "CWE-20", "CWE-476" ], "cna_assigner": "GitHub_M", "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/29xxx/CVE-2022-29201.json" }- References
-
- https://github.com/tensorflow/tensorflow/blob/f3b9bf4c3c0597563b289c0512e98d4ce81f886e/tensorflow/core/kernels/quantized_conv_ops.cc
- https://github.com/tensorflow/tensorflow/releases/tag/v2.6.4
- https://github.com/tensorflow/tensorflow/releases/tag/v2.7.2
- https://github.com/tensorflow/tensorflow/releases/tag/v2.8.1
- https://github.com/tensorflow/tensorflow/releases/tag/v2.9.0
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/29xxx/CVE-2022-29201.json
- https://github.com/tensorflow/tensorflow/security/advisories/GHSA-pqhm-4wvf-2jg8
- https://nvd.nist.gov/vuln/detail/CVE-2022-29201
- https://github.com/tensorflow/tensorflow/commit/0f0b080ecde4d3dfec158d6f60da34d5e31693c4
Affected packages
Git / github.com/tensorflow/tensorflow
Affected ranges
- Type
- GIT
- Repo
- https://github.com/tensorflow/tensorflow
- Events
-
Introduced0 Unknown introduced commit / All previous commits are affectedFixedIntroducedFixedIntroducedFixedFixedFixed
- Database specific
-
Show details
{ "cpe": [ "cpe:2.3:a:google:tensorflow:*:*:*:*:*:*:*:*", "cpe:2.3:a:google:tensorflow:2.7.0:rc0:*:*:*:*:*:*", "cpe:2.3:a:google:tensorflow:2.7.0:rc1:*:*:*:*:*:*", "cpe:2.3:a:google:tensorflow:2.8.0:-:*:*:*:*:*:*", "cpe:2.3:a:google:tensorflow:2.8.0:rc0:*:*:*:*:*:*", "cpe:2.3:a:google:tensorflow:2.8.0:rc1:*:*:*:*:*:*", "cpe:2.3:a:google:tensorflow:2.9.0:rc0:*:*:*:*:*:*", "cpe:2.3:a:google:tensorflow:2.9.0:rc1:*:*:*:*:*:*" ], "source": [ "CPE_RANGE", "CPE_STRING", "REFERENCES" ], "extracted_events": [ { "introduced": "0" }, { "fixed": "2.6.4" }, { "introduced": "2.7.0" }, { "fixed": "2.7.2" }, { "introduced": "2.7.0-rc0" }, { "last_affected": "2.7.0-rc0" }, { "introduced": "2.7.0-rc1" }, { "last_affected": "2.7.0-rc1" }, { "introduced": "2.8.0-NA" }, { "last_affected": "2.8.0-NA" }, { "introduced": "2.8.0-rc0" }, { "last_affected": "2.8.0-rc0" }, { "introduced": "2.8.0-rc1" }, { "last_affected": "2.8.0-rc1" }, { "introduced": "2.9.0-rc0" }, { "last_affected": "2.9.0-rc0" }, { "introduced": "2.9.0-rc1" }, { "last_affected": "2.9.0-rc1" } ] }
Affected versions
0.*
0.5.0
0.6.0
2.*
2.7.0-rc0
2.7.0-rc1
2.8.0-NA
2.8.0-rc0
2.8.0-rc1
2.9.0-rc0
2.9.0-rc1
v1.*
v1.1.0-rc1
v1.1.0-rc2
v1.12.1
v1.6.0-rc1
v1.9.0-rc2
v2.*
v2.6.0
v2.6.0-rc0
v2.6.0-rc1
v2.6.0-rc2
v2.6.1
v2.6.2
v2.6.3
v2.7.0
v2.7.1
v2.8.0
v2.8.0-rc0
v2.8.0-rc1
v2.9.0-rc0
v2.9.0-rc1
v2.9.0-rc2
Database specific
vanir_signatures
[
{
"target": {
"file": "tensorflow/core/kernels/quantized_conv_ops_test.cc",
"function": "TEST_F"
},
"deprecated": false,
"id": "CVE-2022-29201-15e5981f",
"signature_version": "v1",
"digest": {
"function_hash": "169876322947976089489551384135146389691",
"length": 1705.0
},
"signature_type": "Function",
"source": "https://github.com/tensorflow/tensorflow/commit/0f0b080ecde4d3dfec158d6f60da34d5e31693c4"
},
{
"target": {
"file": "tensorflow/core/kernels/quantized_conv_ops.cc"
},
"deprecated": false,
"id": "CVE-2022-29201-3da4a517",
"signature_version": "v1",
"digest": {
"line_hashes": [
"222127464424197151312201508530572355375",
"334071559888152590303671518969569069212",
"303322664097994696350707705076678115994",
"61423412841982600026255808326272231029",
"12803966578727707693718103160251753128",
"26009922089557397114819885204638861534",
"169833022712220206946179210229954992585",
"166297090125927854202254850438197518963",
"266745669498482532529041100593662099803",
"196449550045563088823588211951274545458",
"49887445249216365808568830357617651480",
"238960558971486481657102953624929000728",
"67527139083513412173606849573818927966",
"60653666337444819877792196398075282985",
"306089263571182940769881042116993574999"
],
"threshold": 0.9
},
"signature_type": "Line",
"source": "https://github.com/tensorflow/tensorflow/commit/0f0b080ecde4d3dfec158d6f60da34d5e31693c4"
},
{
"target": {
"file": "tensorflow/core/kernels/quantized_conv_ops_test.cc",
"function": "TEST_F"
},
"deprecated": false,
"id": "CVE-2022-29201-737899b5",
"signature_version": "v1",
"digest": {
"function_hash": "334546105872343221942130398738612174008",
"length": 1571.0
},
"signature_type": "Function",
"source": "https://github.com/tensorflow/tensorflow/commit/0f0b080ecde4d3dfec158d6f60da34d5e31693c4"
},
{
"target": {
"file": "tensorflow/core/kernels/quantized_conv_ops_test.cc",
"function": "TEST_F"
},
"deprecated": false,
"id": "CVE-2022-29201-7d9d65e1",
"signature_version": "v1",
"digest": {
"function_hash": "228402949433050483132927117190500744694",
"length": 2271.0
},
"signature_type": "Function",
"source": "https://github.com/tensorflow/tensorflow/commit/0f0b080ecde4d3dfec158d6f60da34d5e31693c4"
},
{
"target": {
"file": "tensorflow/core/kernels/quantized_conv_ops_test.cc",
"function": "TEST_F"
},
"deprecated": false,
"id": "CVE-2022-29201-cc59cefc",
"signature_version": "v1",
"digest": {
"function_hash": "160498315446740084938018477911145023617",
"length": 1515.0
},
"signature_type": "Function",
"source": "https://github.com/tensorflow/tensorflow/commit/0f0b080ecde4d3dfec158d6f60da34d5e31693c4"
},
{
"target": {
"file": "tensorflow/core/kernels/quantized_conv_ops_test.cc"
},
"deprecated": false,
"id": "CVE-2022-29201-e1b76e5e",
"signature_version": "v1",
"digest": {
"line_hashes": [
"96102057876460340756226779263734911608",
"260894781741332688016660620914003383145",
"109305452863524769094266493699593454354",
"53873350927231335504726265587243618858",
"209481700081496145575083227306967568242",
"93410809845323035930536728146720775939",
"166965649408864252649373451883594788302",
"8787874801499126514889075172784323315",
"219140083370382327724085172135354997266",
"192872023628867772523033946557817606163",
"114981062074063230992394029044143918314",
"50533667815199908839388385633968739847",
"182968109486089702541765018081610329725",
"186054801188182943669412486827739604298",
"232550946738321337080989218819706504946",
"118655222761935353979913377724080259076",
"81596715103290379167193924796000237735",
"114981062074063230992394029044143918314",
"50533667815199908839388385633968739847",
"266443050688095839610705026918827544938",
"138539893050891084104936400065900402251",
"232550946738321337080989218819706504946",
"118655222761935353979913377724080259076",
"81596715103290379167193924796000237735",
"114981062074063230992394029044143918314",
"50533667815199908839388385633968739847",
"266443050688095839610705026918827544938",
"138539893050891084104936400065900402251",
"96102057876460340756226779263734911608",
"260894781741332688016660620914003383145",
"109305452863524769094266493699593454354",
"53873350927231335504726265587243618858",
"209481700081496145575083227306967568242",
"93410809845323035930536728146720775939",
"166965649408864252649373451883594788302"
],
"threshold": 0.9
},
"signature_type": "Line",
"source": "https://github.com/tensorflow/tensorflow/commit/0f0b080ecde4d3dfec158d6f60da34d5e31693c4"
},
{
"target": {
"file": "tensorflow/core/kernels/quantized_conv_ops_test.cc",
"function": "TEST_F"
},
"deprecated": false,
"id": "CVE-2022-29201-e459b689",
"signature_version": "v1",
"digest": {
"function_hash": "38527116282901780815697184308357372367",
"length": 2271.0
},
"signature_type": "Function",
"source": "https://github.com/tensorflow/tensorflow/commit/0f0b080ecde4d3dfec158d6f60da34d5e31693c4"
}
]
source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-29201.json"
vanir_signatures_modified
"2026-08-12T13:00:56Z"