AVID-2026-R1028

Description

Segfault due to missing support for quantized types in TensorFlow (CVE-2022-29205)

Details

TensorFlow is an open source platform for machine learning. Prior to versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4, there is a potential for segfault / denial of service in TensorFlow by calling tf.compat.v1.* ops which don’t yet have support for quantized types, which was added after migration to TensorFlow 2.x. In these scenarios, since the kernel is missing, a nullptr value is passed to ParseDimensionValue for the py_value argument. Then, this is dereferenced, resulting in segfault. Versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4 contain a patch for this issue.

Reason for inclusion in AVID: The AVID candidate describes a vulnerability in TensorFlow, a core ML framework, causing a segmentation fault/denial of service due to missing support for quantized types in tf.compat.v1 ops. TensorFlow is a widely used AI software component in training, packaging, deployment, and serving pipelines; this constitutes a software supply-chain vulnerability within AI software stacks. The issue is exploitable via local access and has patches in newer releases. Evidence from the CVE/NVD and release notes provides sufficient signal.

References

Affected or Relevant Artifacts

Developer: tensorflow
Deployer: tensorflow
Artifact Details:

Type	Name
System	tensorflow

Impact

AVID Taxonomy Categorization

Risk domains: Security
SEP subcategories: S0100: Software Vulnerability
Lifecycle stages: L06: Deployment

CVSS

Version	3.1
Vector String	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Base Score	5.5
Base Severity	🟠 Medium
Attack Vector	LOCAL
Attack Complexity	🟢 Low
Privileges Required	🟢 Low
User Interaction	NONE
Scope	UNCHANGED
Confidentiality Impact	NONE
Integrity Impact	NONE
Availability Impact	🔴 High

CWE

ID	Description
CWE-908	CWE-908: Use of Uninitialized Resource
CWE-476	CWE-476: NULL Pointer Dereference

Other information

Report Type: Advisory
Credits:
Date Reported: 2022-05-20
Version: 0.3.3
AVID Entry