CVE-2022-29213

Advisory

TensorFlow is an open source platform for machine learning. Prior to versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4, the 'tf.compat.v1.signal.rfft2d' and 'tf.compat.v1.signal.rfft3d' lack input validation and under certain condition can result in crashes (due to 'CHECK'-failures). Versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4 contain a patch for this issue.

Affected package

Affected versions

Fixed versions

Vulnerability changelog

This vulnerability has no description

Resources

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-29213
• https://github.com/tensorflow/tensorflow/issues/55263
• https://github.com/tensorflow/tensorflow/commit/0a8a781e597b18ead006d19b7d23d0a369e9ad73
• https://github.com/tensorflow/tensorflow/releases/tag/v2.6.4
• https://github.com/tensorflow/tensorflow/releases/tag/v2.7.2
• https://github.com/tensorflow/tensorflow/releases/tag/v2.8.1
• https://github.com/tensorflow/tensorflow/releases/tag/v2.9.0
• https://github.com/tensorflow/tensorflow/security/advisories/GHSA-5889-7v45-q28m
• https://github.com/tensorflow/tensorflow/pull/55274