Vulnerability · Published May 20, 2022 · Assigned by GitHub_M
CVE-2022-29212Core dump when loading TFLite models with quantization in TensorFlow
Medium 5.5
In plain English
A medium-severity improper input validation in tensorflow from tensorflow. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 26% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Official description
TensorFlow is an open source platform for machine learning. Prior to versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4, certain TFLite models that were created using TFLite model converter would crash when loaded in the TFLite interpreter. The culprit is that during quantization the scale of values could be greater than 1 but code was always assuming sub-unit scaling. Thus, since code was calling `QuantizeMultiplierSmallerThanOneExp`, the `TFLITE_CHECK_LT` assertion would trigger and abort the process. Versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4 contain a patch for this issue.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| PyPI | tensorflow | 2.6.4, 2.7.2, 2.8.1 | PYSEC-2026-3141 |
| PyPI | tensorflow | 2.6.4 | GHSA-8wwm-6264-x792 |
| PyPI | tensorflow | 2.7.2 | GHSA-8wwm-6264-x792 |
| PyPI | tensorflow | 2.8.1 | GHSA-8wwm-6264-x792 |
| PyPI | tensorflow-cpu | 2.7.2 | GHSA-8wwm-6264-x792 |
| PyPI | tensorflow-cpu | 2.6.4, 2.7.2, 2.8.1 | PYSEC-2026-3299 |
| PyPI | tensorflow-cpu | 2.6.4 | GHSA-8wwm-6264-x792 |
| PyPI | tensorflow-cpu | 2.8.1 | GHSA-8wwm-6264-x792 |
| PyPI | tensorflow-gpu | 2.6.4, 2.7.2, 2.8.1 | PYSEC-2026-972 |
| PyPI | tensorflow-gpu | 2.6.4 | GHSA-8wwm-6264-x792 |
| PyPI | tensorflow-gpu | 2.7.2 | GHSA-8wwm-6264-x792 |
| PyPI | tensorflow-gpu | 2.8.1 | GHSA-8wwm-6264-x792 |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| tensorflow | tensorflow | < 2.6.4>= 2.7.0rc0, < 2.7.2>= 2.8.0rc0, < 2.8.1>= 2.9.0rc0, < 2.9.0 |
Weakness: CWE-20 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
References
- https://github.com/tensorflow/tensorflow/releases/tag/v2.6.4 x_refsource_MISC
- https://github.com/tensorflow/tensorflow/releases/tag/v2.7.2 x_refsource_MISC
- https://github.com/tensorflow/tensorflow/releases/tag/v2.8.1 x_refsource_MISC
- https://github.com/tensorflow/tensorflow/releases/tag/v2.9.0 x_refsource_MISC
- https://github.com/tensorflow/tensorflow/security/advisories/GHSA-8wwm-6264-x792 x_refsource_CONFIRM
- https://github.com/tensorflow/tensorflow/issues/43661 x_refsource_MISC
- https://github.com/tensorflow/tensorflow/commit/a989426ee1346693cc015792f11d715f6944f2b8 x_refsource_MISC
- https://github.com/tensorflow/tensorflow/blob/f3b9bf4c3c0597563b289c0512e98d4ce81f886e/tensorflow/lite/kernels/internal/quantization_util.cc#L114-L123 x_refsource_MISC