TI-2022-11753 Aliases CVE-2022-29210 GHSA-hc2f-7r5r-r2hg

Heap buffer overflow due to incorrect hash function in TensorFlow

LOW 24CWE-120Published 2022-05-20 · Updated 2025-04-23

Key facts

Attack vector: Local
Privileges required: Low
User interaction: None
Attack complexity: Low
Impact type: Denial of service
Confidentiality · integrity · availability: None · None · High
Fix status: Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA and GitHub. Impact type from CWE-120 and the CVSS impact.

Summary

TensorFlow is an open source platform for machine learning. In version 2.8.0, the `TensorKey` hash function used total estimated `AllocatedBytes()`, which (a) is an estimate per tensor, and (b) is a very poor hash function for constants (e.g. `int32_t`). It also tried to access individual tensor bytes through `tensor.data()` of size `AllocatedBytes()`. This led to ASAN failures because the `AllocatedBytes()` is an estimate of total bytes allocated by a tensor, including any pointed-to constructs (e.g. strings), and does not refer to contiguous bytes in the `.data()` buffer. The discoverers could not use this byte vector anyway because types such as `tstring` include pointers, whereas they needed to hash the string values themselves. This issue is patched in Tensorflow versions 2.9.0 and 2.8.1.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV

EPSS 0.0023 13th percentileScored 2026-11-07

Fix Fixed tensorflow (PyPI): 2.8.1tensorflow-cpu (PyPI): 2.8.1+1 more product

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: None
Automatable: No
Technical impact: Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
Google	tensorflow	== 2.8.0	—	No fix listed	CNA
—	tensorflow (PyPI)	2.8.0 to before 2.8.1	2.8.1	Patch available	GHSA-hc2f-7r5r-r2hg
—	tensorflow-cpu (PyPI)	2.8.0 to before 2.8.1	2.8.1	Patch available	GHSA-hc2f-7r5r-r2hg
—	tensorflow-gpu (PyPI)	2.8.0 to before 2.8.1	2.8.1	Patch available	GHSA-hc2f-7r5r-r2hg

tensorflow VendorGoogle Affected == 2.8.0 Fixed in — No fix listed CNA
tensorflow (PyPI) Vendor— Affected 2.8.0 to before 2.8.1 Fixed in 2.8.1 Patch available GHSA-hc2f-7r5r-r2hg
tensorflow-cpu (PyPI) Vendor— Affected 2.8.0 to before 2.8.1 Fixed in 2.8.1 Patch available GHSA-hc2f-7r5r-r2hg
tensorflow-gpu (PyPI) Vendor— Affected 2.8.0 to before 2.8.1 Fixed in 2.8.1 Patch available GHSA-hc2f-7r5r-r2hg

CPE configurations NVD · 1

CPE	Versions	Role	Vendor
cpe:2.3:a:google:tensorflow:2.8.0:::::::*	2.8.0	Vulnerable	Google

cpe:2.3:a:google:tensorflow:2.8.0:*:*:*:*:*:*:* Versions 2.8.0 Vulnerable ·Google

Remediation

Fix · GHSA-hc2f-7r5r-r2hg tensorflow (PyPI) Fixed in 2.8.1 Advisory →
Fix · GHSA-hc2f-7r5r-r2hg tensorflow-cpu (PyPI) Fixed in 2.8.1 Advisory →
Fix · GHSA-hc2f-7r5r-r2hg tensorflow-gpu (PyPI) Fixed in 2.8.1 Advisory →

Timeline

2026-10-02 Threatist record created from CVE-2022-29210
2026-10-03 Alias added: GHSA-hc2f-7r5r-r2hg

References

Patch 2

Advisory 4

Other 1

https://github.com/tensorflow/tensorflow

TI-2022-20241 FractionalMaxPool and FractionalAVGPool heap out-of-bounds acess in Tensorflow CVSS 3.1CRITICAL 9.8
TI-2022-07640 Integer overflow in Tensorflow CVSS 3.1CRITICAL 9.8
TI-2022-07627 Out of bounds read and write in Tensorflow CVSS 3.1HIGH 8.8
TI-2022-07619 Out of bounds write in Tensorflow CVSS 3.1HIGH 8.8
TI-2022-07613 Read and Write outside of bounds in TFLite CVSS 3.1HIGH 8.8
TI-2022-07612 Integer overflow in TFLite CVSS 3.1HIGH 8.8

See all 430 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences