Log in Start free

Vulnerability · Published Feb 4, 2022 · Assigned by GitHub_M

CVE-2022-23559Integer overflow in TFLite

High 8.8

In plain English

A high-severity integer overflow in tensorflow from tensorflow. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 1.2% (higher than 68% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)8.8High
Exploit odds (30 days)1.2%top 32.1% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known

Official description

Tensorflow is an Open Source Machine Learning Framework. An attacker can craft a TFLite model that would cause an integer overflow in embedding lookup operations. Both `embedding_size` and `lookup_size` are products of values provided by the user. Hence, a malicious user could trigger overflows in the multiplication. In certain scenarios, this can then result in heap OOB read/write. Users are advised to upgrade to a patched version.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
PyPItensorflow2.5.3GHSA-98p5-x8x4-c9m5
PyPItensorflow2.6.3GHSA-98p5-x8x4-c9m5
PyPItensorflow2.7.1GHSA-98p5-x8x4-c9m5
PyPItensorflow2.5.3, 2.6.3, 2.7.1PYSEC-2026-3146
PyPItensorflow-cpu2.6.3GHSA-98p5-x8x4-c9m5
PyPItensorflow-cpu2.7.1GHSA-98p5-x8x4-c9m5
PyPItensorflow-cpu2.5.3, 2.6.3PYSEC-2022-68
PyPItensorflow-cpu2.5.3GHSA-98p5-x8x4-c9m5
PyPItensorflow-gpu2.7.1GHSA-98p5-x8x4-c9m5
PyPItensorflow-gpu2.5.3, 2.6.3PYSEC-2022-123
PyPItensorflow-gpu2.5.3GHSA-98p5-x8x4-c9m5
PyPItensorflow-gpu2.6.3GHSA-98p5-x8x4-c9m5

Affected products (as reported)

VendorProductVersions
tensorflow tensorflow >= 2.7.0, < 2.7.1>= 2.6.0, < 2.6.3< 2.5.3

Weakness: CWE-190 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References