PT-2022-16074 · Google · Tensorflow

Wang Xuan · Published 2022-02-04 · Updated 2024-03-06 · CVE-2022-23559

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions TensorFlow versions prior to 2.8.0 TensorFlow versions 2.7.0 through 2.7.0 TensorFlow versions 2.6.0 through 2.6.2 TensorFlow versions 2.5.0 through 2.5.2

Description An attacker can craft a TFLite model that would cause an integer overflow in embedding lookup operations. Both embedding size and lookup size are products of values provided by the user, allowing a malicious user to trigger overflows in the multiplication. This can result in heap OOB read/write in certain scenarios.

Recommendations For TensorFlow versions prior to 2.8.0, upgrade to version 2.8.0 or later. For TensorFlow versions 2.7.0 through 2.7.0, upgrade to version 2.7.1 or later. For TensorFlow versions 2.6.0 through 2.6.2, upgrade to version 2.6.3 or later. For TensorFlow versions 2.5.0 through 2.5.2, upgrade to version 2.5.3 or later. As a temporary workaround, consider restricting the use of user-provided values for embedding size and lookup size to minimize the risk of exploitation.

Exploit

Fix

Integer Overflow

Weakness Enumeration

CWE-190

Related Identifiers

BIT-TENSORFLOW-2022-23559

CVE-2022-23559

GHSA-98P5-X8X4-C9M5

OPENSUSE-SU-2024:12116-1

PYSEC-2022-123

PYSEC-2022-68

Affected Products

Tensorflow

References · 15

• 🔥 https://github.com/tensorflow/tensorflow/blob/ca6f96b62ad84207fbec580404eaa7dd7403a550/tensorflow/lite/kernels/embedding_lookup_sparse.cc#L179-L189 · Exploit
• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/23xxx/CVE-2022-23559.json · Exploit
• https://github.com/tensorflow/tensorflow/security/advisories/GHSA-98p5-x8x4-c9m5 · Patch
• https://github.com/tensorflow/tensorflow/commit/f19be71717c497723ba0cea0379e84f061a75e01 · Patch
• https://github.com/tensorflow/tensorflow/commit/a4e401da71458d253b05e41f28637b65baf64be4 · Patch
• https://github.com/tensorflow/tensorflow/commit/1de49725a5fc4e48f1a3b902ec3599ee99283043 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2022-23559 · Security Note
• https://osv.dev/vulnerability/GHSA-98p5-x8x4-c9m5 · Vendor Advisory
• https://osv.dev/vulnerability/BIT-tensorflow-2022-23559 · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2022-68 · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2022-123 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-23559 · Vendor Advisory
• https://github.com/tensorflow/tensorflow · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-68.yaml · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-123.yaml · Note