AVID-2026-R0991

Description

Stack overflow in Tensorflow (CVE-2022-23591)

Details

Tensorflow is an Open Source Machine Learning Framework. The GraphDef format in TensorFlow does not allow self recursive functions. The runtime assumes that this invariant is satisfied. However, a GraphDef containing a fragment such as the following can be consumed when loading a SavedModel. This would result in a stack overflow during execution as resolving each NodeDef means resolving the function itself and its nodes. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range.

Reason for inclusion in AVID: CVE-2022-23591 describes a stack overflow in TensorFlow’s GraphDef processing that can be triggered during loading of a SavedModel, causing a potential denial of service. TensorFlow is a core AI framework; this vulnerability affects software components used to build, train, deploy, or serve AI models, representing a software supply chain issue in AI stacks. The report includes CVE details, affected versions, and CVSS-based impact, signaling a security vulnerability.

References

Affected or Relevant Artifacts

Developer: tensorflow
Deployer: tensorflow
Artifact Details:

Type	Name
System	tensorflow

Impact

AVID Taxonomy Categorization

Risk domains: Security
SEP subcategories: S0100: Software Vulnerability
Lifecycle stages: L06: Deployment

CVSS

Version	3.1
Vector String	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Base Score	7.5
Base Severity	🔴 High
Attack Vector	NETWORK
Attack Complexity	🟢 Low
Privileges Required	NONE
User Interaction	NONE
Scope	UNCHANGED
Confidentiality Impact	NONE
Integrity Impact	NONE
Availability Impact	🔴 High

CWE

ID	Description
CWE-400	CWE-400: Uncontrolled Resource Consumption

Other information

Report Type: Advisory
Credits:
Date Reported: 2022-02-04
Version: 0.3.3
AVID Entry