TI-2022-07645 Aliases CVE-2022-23592 GHSA-vq36-27g6-p492

Out of bounds read in Tensorflow

HIGH 68CWE-125Published 2022-02-04 · Updated 2025-04-22

Key facts

Attack vector: Network
Privileges required: Low
User interaction: None
Attack complexity: Low
Impact type: —
Confidentiality · integrity · availability: High · None · High
Fix status: Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA and GitHub.

Summary

Tensorflow is an Open Source Machine Learning Framework. TensorFlow's type inference can cause a heap out of bounds read as the bounds checking is done in a `DCHECK` (which is a no-op during production). An attacker can control the `input_idx` variable such that `ix` would be larger than the number of values in `node_t.args`. The fix will be included in TensorFlow 2.8.0. This is the only affected version.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV

EPSS 0.00865 58th percentileScored 2026-11-07

Public exploit Yes 1 exploit referenceTagged by NVD

Fix Fixed tensorflow (PyPI): 2.8.0tensorflow-cpu (PyPI): 2.8.0+1 more product

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: Poc
Automatable: No
Technical impact: Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
Google	tensorflow	= 2.8.0-rc0	—	No fix listed	CNA
—	tensorflow (PyPI)	2.8.0-rc0 to before 2.8.0	2.8.0	Patch available	GHSA-vq36-27g6-p492
—	tensorflow-cpu (PyPI)	2.8.0-rc0 to before 2.8.0	2.8.0	Patch available	GHSA-vq36-27g6-p492
—	tensorflow-gpu (PyPI)	2.8.0-rc0 to before 2.8.0	2.8.0	Patch available	GHSA-vq36-27g6-p492

tensorflow VendorGoogle Affected = 2.8.0-rc0 Fixed in — No fix listed CNA
tensorflow (PyPI) Vendor— Affected 2.8.0-rc0 to before 2.8.0 Fixed in 2.8.0 Patch available GHSA-vq36-27g6-p492
tensorflow-cpu (PyPI) Vendor— Affected 2.8.0-rc0 to before 2.8.0 Fixed in 2.8.0 Patch available GHSA-vq36-27g6-p492
tensorflow-gpu (PyPI) Vendor— Affected 2.8.0-rc0 to before 2.8.0 Fixed in 2.8.0 Patch available GHSA-vq36-27g6-p492

CPE configurations NVD · 1

CPE	Versions	Role	Vendor
cpe:2.3:a:google:tensorflow::::::::	2.7.0 to before 2.8.0	Vulnerable	Google

cpe:2.3:a:google:tensorflow:*:*:*:*:*:*:*:* Versions 2.7.0 to before 2.8.0 Vulnerable ·Google

Remediation

Fix · GHSA-vq36-27g6-p492 tensorflow (PyPI) Fixed in 2.8.0 Advisory →
Fix · GHSA-vq36-27g6-p492 tensorflow-cpu (PyPI) Fixed in 2.8.0 Advisory →
Fix · GHSA-vq36-27g6-p492 tensorflow-gpu (PyPI) Fixed in 2.8.0 Advisory →

Timeline

2026-10-02 Threatist record created from CVE-2022-23592
2026-10-03 Alias added: GHSA-vq36-27g6-p492

References

Exploit 1

https://github.com/tensorflow/tensorflow/blob/274df9b02330b790aa8de1cee164b70f72b9b244/tensorflow/core/graph/graph.cc#L223-L229

Patch 2

Advisory 1

https://nvd.nist.gov/vuln/detail/CVE-2022-23592

Other 3

TI-2022-20241 FractionalMaxPool and FractionalAVGPool heap out-of-bounds acess in Tensorflow CVSS 3.1CRITICAL 9.8
TI-2022-07640 Integer overflow in Tensorflow CVSS 3.1CRITICAL 9.8
TI-2022-07627 Out of bounds read and write in Tensorflow CVSS 3.1HIGH 8.8
TI-2022-07619 Out of bounds write in Tensorflow CVSS 3.1HIGH 8.8
TI-2022-07613 Read and Write outside of bounds in TFLite CVSS 3.1HIGH 8.8
TI-2022-07612 Integer overflow in TFLite CVSS 3.1HIGH 8.8

See all 430 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences