CVE-2022-29205

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2022-29205

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-29205.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2022-29205

Aliases

Published

2022-05-20T22:25:14Z

Modified

2026-07-09T04:31:41.283815Z

Severity

5.5 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVSS Calculator

Summary

Segfault due to missing support for quantized types in TensorFlow

Details

TensorFlow is an open source platform for machine learning. Prior to versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4, there is a potential for segfault / denial of service in TensorFlow by calling tf.compat.v1.* ops which don't yet have support for quantized types, which was added after migration to TensorFlow 2.x. In these scenarios, since the kernel is missing, a nullptr value is passed to ParseDimensionValue for the py_value argument. Then, this is dereferenced, resulting in segfault. Versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4 contain a patch for this issue.

Database specific

{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/29xxx/CVE-2022-29205.json",
    "cna_assigner": "GitHub_M",
    "cwe_ids": [
        "CWE-476",
        "CWE-908"
    ]
}

References

Affected packages

Git / github.com/tensorflow/tensorflow

Affected ranges

Type

GIT

Repo

https://github.com/tensorflow/tensorflow

Events

Introduced

Fixed

33ed2b11cb8e879d86c371700e6573db1814a69e

Introduced

c256c071bb26e1e13b4666d1b3e229e110bc914a

Fixed

dd7b8a3c1714d0052ce4b4a2fd8dcef927439a24

Introduced

ce35e5c3a8efdb8161c6a85c8fb9ffb5bbdc9ffd

Fixed

237822b59fc504dda2c564787f5d3ad9c4aa62d9

Fixed

0516d4d8bced506cae97dc3cb45dbd2fe4311f26

Fixed

8a20d54a3c1bfa38c03ea99a2ad3c1b0a45dfa95

Database specific

{
    "cpe": [
        "cpe:2.3:a:google:tensorflow:*:*:*:*:*:*:*:*",
        "cpe:2.3:a:google:tensorflow:2.7.0:rc0:*:*:*:*:*:*",
        "cpe:2.3:a:google:tensorflow:2.7.0:rc1:*:*:*:*:*:*",
        "cpe:2.3:a:google:tensorflow:2.8.0:-:*:*:*:*:*:*",
        "cpe:2.3:a:google:tensorflow:2.8.0:rc0:*:*:*:*:*:*",
        "cpe:2.3:a:google:tensorflow:2.8.0:rc1:*:*:*:*:*:*",
        "cpe:2.3:a:google:tensorflow:2.9.0:rc0:*:*:*:*:*:*",
        "cpe:2.3:a:google:tensorflow:2.9.0:rc1:*:*:*:*:*:*"
    ],
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "fixed": "2.6.4"
        },
        {
            "introduced": "2.7.0"
        },
        {
            "fixed": "2.7.2"
        },
        {
            "introduced": "2.7.0-rc0"
        },
        {
            "last_affected": "2.7.0-rc0"
        },
        {
            "introduced": "2.7.0-rc1"
        },
        {
            "last_affected": "2.7.0-rc1"
        },
        {
            "introduced": "2.8.0-NA"
        },
        {
            "last_affected": "2.8.0-NA"
        },
        {
            "introduced": "2.8.0-rc0"
        },
        {
            "last_affected": "2.8.0-rc0"
        },
        {
            "introduced": "2.8.0-rc1"
        },
        {
            "last_affected": "2.8.0-rc1"
        },
        {
            "introduced": "2.9.0-rc0"
        },
        {
            "last_affected": "2.9.0-rc0"
        },
        {
            "introduced": "2.9.0-rc1"
        },
        {
            "last_affected": "2.9.0-rc1"
        }
    ],
    "source": [
        "CPE_RANGE",
        "CPE_STRING",
        "REFERENCES"
    ]
}

Affected versions

0.*

0.5.0

0.6.0

2.*

2.7.0-rc0

2.7.0-rc1

2.8.0-NA

2.8.0-rc0

2.8.0-rc1

2.9.0-rc0

2.9.0-rc1

v1.*

v1.1.0-rc1

v1.1.0-rc2

v1.12.1

v1.6.0-rc1

v1.9.0-rc2

v2.*

v2.6.0

v2.6.0-rc0

v2.6.0-rc1

v2.6.0-rc2

v2.6.1

v2.6.2

v2.6.3

v2.7.0

v2.7.1

v2.8.0

v2.8.0-rc0

v2.8.0-rc1

v2.9.0-rc0

v2.9.0-rc1

v2.9.0-rc2

Database specific

vanir_signatures

[
    {
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "232068484380608205728877896816672254588",
                "111244238934171099582514256169102877968",
                "173540220713093303882516094290680628336",
                "145611171253498808978374578843988312906",
                "118383632072213296804845068973162274867",
                "80070861117886958713440489398268032434",
                "322048816822133878897327280412478096772"
            ]
        },
        "target": {
            "file": "tensorflow/python/eager/pywrap_tfe_src.cc"
        },
        "id": "CVE-2022-29205-30055c4d",
        "signature_version": "v1",
        "signature_type": "Line",
        "source": "https://github.com/tensorflow/tensorflow/commit/237822b59fc504dda2c564787f5d3ad9c4aa62d9",
        "deprecated": false
    },
    {
        "digest": {
            "function_hash": "24436648550211240824948276007412159752",
            "length": 2745.0
        },
        "target": {
            "function": "SetOpAttrScalar",
            "file": "tensorflow/python/eager/pywrap_tfe_src.cc"
        },
        "id": "CVE-2022-29205-5ee0c5ea",
        "signature_version": "v1",
        "signature_type": "Function",
        "source": "https://github.com/tensorflow/tensorflow/commit/237822b59fc504dda2c564787f5d3ad9c4aa62d9",
        "deprecated": false
    },
    {
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "252665121724847056286954676521355351222",
                "163550111388285583040922791303172545426",
                "158618147316231038620123492841008245325",
                "208095995217271067984724164423478096771"
            ]
        },
        "target": {
            "file": "tensorflow/core/kernels/strided_slice_op.cc"
        },
        "id": "CVE-2022-29205-71168da0",
        "signature_version": "v1",
        "signature_type": "Line",
        "source": "https://github.com/tensorflow/tensorflow/commit/237822b59fc504dda2c564787f5d3ad9c4aa62d9",
        "deprecated": false
    },
    {
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "270029643046540711280123135706420590809",
                "73986761326651041845489012805255107124",
                "302319320013928560743729281233236208188"
            ]
        },
        "target": {
            "file": "tensorflow/core/kernels/strided_slice_op_impl.h"
        },
        "id": "CVE-2022-29205-afef3717",
        "signature_version": "v1",
        "signature_type": "Line",
        "source": "https://github.com/tensorflow/tensorflow/commit/237822b59fc504dda2c564787f5d3ad9c4aa62d9",
        "deprecated": false
    }
]

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-29205.json"

vanir_signatures_modified

"2026-07-09T04:31:41Z"