AVID-2026-R0983

Description

CHECK-failures during Grappler’s IsSimplifiableReshape in Tensorflow (CVE-2022-23581)

Details

Tensorflow is an Open Source Machine Learning Framework. The Grappler optimizer in TensorFlow can be used to cause a denial of service by altering a SavedModel such that IsSimplifiableReshape would trigger CHECK failures. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range.

Reason for inclusion in AVID: CVE-2022-23581 describes a denial-of-service vulnerability in TensorFlow’s Grappler optimizer triggered by crafted SavedModel graphs, affecting TensorFlow (a core AI framework). This concerns software used to build/train/deploy AI systems, i.e., a component of the AI software stack, not hardware-only. The CVE entry provides explicit impact, affected versions, and fixes, offering sufficient evidence for a security vulnerability in the AI software supply chain.

References

Affected or Relevant Artifacts

Developer: tensorflow
Deployer: tensorflow
Artifact Details:

Type	Name
System	tensorflow

Impact

AVID Taxonomy Categorization

Risk domains: Security
SEP subcategories: S0100: Software Vulnerability
Lifecycle stages: L06: Deployment

CVSS

Version	3.1
Vector String	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Base Score	6.5
Base Severity	🟠 Medium
Attack Vector	NETWORK
Attack Complexity	🟢 Low
Privileges Required	🟢 Low
User Interaction	NONE
Scope	UNCHANGED
Confidentiality Impact	NONE
Integrity Impact	NONE
Availability Impact	🔴 High

CWE

ID	Description
CWE-617	CWE-617: Reachable Assertion

Other information

Report Type: Advisory
Credits:
Date Reported: 2022-02-04
Version: 0.3.3
AVID Entry