CVE-2022-21727
Integer overflow in Tensorflow
Reported by github_m · Published February 3, 2022
Tensorflow is an Open Source Machine Learning Framework. The implementation of shape inference for `Dequantize` is vulnerable to an integer overflow weakness. The `axis` argument can be `-1` (the default value for the optional argument) or any other positive value at most the number of dimensions of the input. Unfortunately, the upper bound is not checked, and, since the code computes `axis + 1`, an attacker can trigger an integer overflow. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range.
Risk scores
Affected products
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | n/a |
| n/a | n/a | * |
| PyPI | tensorflow-gpu | 2.7.0, 0, 2.6.0 |
| PyPI | tensorflow | 2.7.0, 0, 2.6.0 |
| PyPI | tensorflow-cpu | 0, 2.6.0, 2.7.0 |
Timeline
- Feb 3, 2022 CVE Published
- Feb 8, 2022 EPSS Score (30 in total, the first dated here)
- Nov 13, 2024 CVE Updated
- Mar 9, 2026 Security Advisory
- Jul 7, 2026 Coalition ESS Score
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln CVE-2022-21727
vulnetix vdb fixes CVE-2022-21727Or with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/CVE-2022-21727/fixes/registry"The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart
References
- x_refsource_CONFIRM
- x_refsource_MISC
- x_refsource_MISC
- https://nvd.nist.gov/vuln/detail/CVE-2022-21727 advisory
- https://github.com/advisories/GHSA-c6fh-56w7-fvjw advisory
- https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-51.yaml advisory
- https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-106.yaml advisory
- https://github.com/tensorflow/tensorflow url