AVID-2026-R1018

Description

Missing validation causes denial of service in TensorFlow via StagePeek (CVE-2022-29195)

Details

TensorFlow is an open source platform for machine learning. Prior to versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4, the implementation of tf.raw_ops.StagePeek does not fully validate the input arguments. This results in a CHECK-failure which can be used to trigger a denial of service attack. The code assumes index is a scalar but there is no validation for this before accessing its value. Versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4 contain a patch for this issue.

Reason for inclusion in AVID: CVE-2022-29195 describes a TensorFlow vulnerability in tf.raw_ops.StagePeek due to improper input validation, causing denial of service. TensorFlow is a core ML framework used in AI pipelines, so this is a software supply-chain issue within AI software stacks. It is a CVE-style security vulnerability with clear impact (availability) and references/patches are provided. This satisfies the criteria for an AVID entry related to AI systems and their software dependencies.

References

Affected or Relevant Artifacts

Developer: tensorflow
Deployer: tensorflow
Artifact Details:

Type	Name
System	tensorflow

Impact

AVID Taxonomy Categorization

Risk domains: Security
SEP subcategories: S0100: Software Vulnerability
Lifecycle stages: L06: Deployment

CVSS

Version	3.1
Vector String	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Base Score	5.5
Base Severity	🟠 Medium
Attack Vector	LOCAL
Attack Complexity	🟢 Low
Privileges Required	🟢 Low
User Interaction	NONE
Scope	UNCHANGED
Confidentiality Impact	NONE
Integrity Impact	NONE
Availability Impact	🔴 High

CWE

ID	Description
CWE-20	CWE-20: Improper Input Validation

Other information

Report Type: Advisory
Credits:
Date Reported: 2022-05-20
Version: 0.3.3
AVID Entry