CVE-2022-41885

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2022-41885
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-41885.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2022-41885
Aliases
Published
2022-11-18T00:00:00Z
Modified
2026-03-03T02:41:32.203660Z
Severity
  • 4.8 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H CVSS Calculator
Summary
Overflow in `FusedResizeAndPadConv2D` in Tensorflow
Details

TensorFlow is an open source platform for machine learning. When tf.raw_ops.FusedResizeAndPadConv2D is given a large tensor shape, it overflows. We have patched the issue in GitHub commit d66e1d568275e6a2947de97dca7a102a211e01ce. The fix will be included in TensorFlow 2.11. We will also cherrypick this commit on TensorFlow 2.10.1, 2.9.3, and TensorFlow 2.8.4, as these are also affected and still in supported range.

Database specific 
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/41xxx/CVE-2022-41885.json",
    "cna_assigner": "GitHub_M",
    "cwe_ids": [
        "CWE-131"
    ]
}
References

Affected packages

Git / github.com/tensorflow/tensorflow

Affected ranges

Type
GIT
Repo
https://github.com/tensorflow/tensorflow
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
a73cc22ba39f89463d3e0910dd12d84dbf8596d2
Introduced
3f878cff5b698b82eea85db2b60d65a2e320850e
Fixed
0516d4d8bced506cae97dc3cb45dbd2fe4311f26
Introduced
8a20d54a3c1bfa38c03ea99a2ad3c1b0a45dfa95
Fixed
d8ce9f9c301d021a69953134185ab728c1c248d3

Affected versions

v2.*
v2.8.0
v2.9.0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-41885.json"