CVE-2022-41907

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

TensorFlow is an open source platform for machine learning. When `tf.raw_ops.ResizeNearestNeighborGrad` is given a large `size` input, it overflows. We have patched the issue in GitHub commit 00c821af032ba9e5f5fa3fe14690c8d28a657624. The fix will be included in TensorFlow 2.11. We will also cherrypick this commit on TensorFlow 2.10.1, 2.9.3, and TensorFlow 2.8.4, as these are also affected and still in supported range.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-131

Affected software

Vendor	Product	Versions
tensorflow	tensorflow	>= 2.10.0, < 2.10.1; >= 2.9.0, < 2.9.3; < 2.8.4

References

https://github.com/tensorflow/tensorflow/blob/master/tensorflow/core/kernels/image/resize_nearest_neighbor_op.ccThird Party Advisory
https://github.com/tensorflow/tensorflow/commit/00c821af032ba9e5f5fa3fe14690c8d28a657624Patch, Third Party Advisory
https://github.com/tensorflow/tensorflow/security/advisories/GHSA-368v-7v32-52fxExploit, Patch, Third Party Advisory
https://github.com/tensorflow/tensorflow/blob/master/tensorflow/core/kernels/image/resize_nearest_neighbor_op.ccThird Party Advisory
https://github.com/tensorflow/tensorflow/commit/00c821af032ba9e5f5fa3fe14690c8d28a657624Patch, Third Party Advisory
https://github.com/tensorflow/tensorflow/security/advisories/GHSA-368v-7v32-52fxExploit, Patch, Third Party Advisory

Timeline

Published: Nov 18, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-419087.5TensorFlow is an open source platform for machine learning. An input `token` that is not a UTF-8 bytestring will trigger a `CHECK` fail in `CVE-2022-419097.5TensorFlow is an open source platform for machine learning. An input `encoded` that is not a valid `CompositeTensorVariant` tensor will trig CVE-2022-41918.8Use after free in Sign-In in Google Chrome prior to 108.0.5359.71 allowed a remote attacker who convinced a user to engage in specific UI in CVE-2022-419109.1TensorFlow is an open source platform for machine learning. The function MakeGrapplerFunctionItem takes arguments that determine the sizes o CVE-2022-419117.5TensorFlow is an open source platform for machine learning. When printing a tensor, we get it's data as a `const char*` array (since that's CVE-2022-419129.8The crewjam/saml go library prior to version 0.4.9 is vulnerable to an authentication bypass when processing SAML responses containing multi CVE-2022-419135.4Discourse-calendar is a plugin for the Discourse messaging platform which adds the ability to create a dynamic calendar in the first post of CVE-2022-419143.7Zulip is an open-source team collaboration tool. For organizations with System for Cross-domain Identity Management(SCIM) account management CVE-2022-419156.5Netty project is an event-driven asynchronous network application framework. Starting in version 4.1.83.Final and prior to 4.1.86.Final, whe CVE-2022-419167.5Heimdal is an implementation of ASN.1/DER, PKIX, and Kerberos. Versions prior to 7.7.1 are vulnerable to a denial of service vulnerability i CVE-2022-419174.3OpenSearch is a community-driven, open source fork of Elasticsearch and Kibana. OpenSearch allows users to specify a local file when definin CVE-2022-419186.3OpenSearch is a community-driven, open source fork of Elasticsearch and Kibana. There is an issue with the implementation of fine-grained ac