AVID-2026-R0946

Description

Out of bounds read in Tensorflow (CVE-2022-21730)

Details

Tensorflow is an Open Source Machine Learning Framework. The implementation of FractionalAvgPoolGrad does not consider cases where the input tensors are invalid allowing an attacker to read from outside of bounds of heap. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range.

Reason for inclusion in AVID: CVE-2022-21730 describes an out-of-bounds read vulnerability in TensorFlow’s FractionalAvgPoolGrad, with a high CVSS score and publicly available remediation. TensorFlow is a core ML framework widely used to build, train, serve, and deploy AI systems, making this a software supply chain issue within AI software stacks. The report provides explicit details and references, supporting classification as a security vulnerability in the AI software supply chain.

References

Affected or Relevant Artifacts

Developer: n/a
Deployer: n/a
Artifact Details:

Type	Name
System	n/a

Impact

AVID Taxonomy Categorization

Risk domains: Security
SEP subcategories: S0100: Software Vulnerability
Lifecycle stages: L06: Deployment

CVSS

Version	3.1
Vector String	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Base Score	8.1
Base Severity	🔴 High
Attack Vector	NETWORK
Attack Complexity	🟢 Low
Privileges Required	🟢 Low
User Interaction	NONE
Scope	UNCHANGED
Confidentiality Impact	🔴 High
Integrity Impact	NONE
Availability Impact	🔴 High

Other information

Report Type: Advisory
Credits:
Date Reported: 2022-02-03
Version: 0.3.3
AVID Entry