AVID-2026-R1023

Description

Missing validation causes denial of service in TensorFlow via LSTMBlockCell (CVE-2022-29200)

Details

TensorFlow is an open source platform for machine learning. Prior to versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4, the implementation of tf.raw_ops.LSTMBlockCell does not fully validate the input arguments. This results in a CHECK-failure which can be used to trigger a denial of service attack. The code does not validate the ranks of any of the arguments to this API call. This results in CHECK-failures when the elements of the tensor are accessed. Versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4 contain a patch for this issue.

Reason for inclusion in AVID: CVE-2022-29200 describes a denial-of-service vulnerability in TensorFlow’s LSTMBlockCell due to improper input validation. TensorFlow is a core ML framework used to build, train, deploy, and serve general-purpose AI systems; this is a software supply-chain vulnerability within the AI stack. The flaw is a software vulnerability (CWE-20) with a CVSS indicating available impact (availability impact) and local access requirements. The report provides explicit details and references, enabling curation.

References

Affected or Relevant Artifacts

Developer: tensorflow
Deployer: tensorflow
Artifact Details:

Type	Name
System	tensorflow

Impact

AVID Taxonomy Categorization

Risk domains: Security
SEP subcategories: S0100: Software Vulnerability
Lifecycle stages: L06: Deployment

CVSS

Version	3.1
Vector String	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Base Score	5.5
Base Severity	🟠 Medium
Attack Vector	LOCAL
Attack Complexity	🟢 Low
Privileges Required	🟢 Low
User Interaction	NONE
Scope	UNCHANGED
Confidentiality Impact	NONE
Integrity Impact	NONE
Availability Impact	🔴 High

CWE

ID	Description
CWE-20	CWE-20: Improper Input Validation

Other information

Report Type: Advisory
Credits:
Date Reported: 2022-05-20
Version: 0.3.3
AVID Entry