PT-2022-16076 · Google · Tensorflow

Wang Xuan · Published 2022-02-04 · Updated 2024-03-06 · CVE-2022-23560

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions TensorFlow versions 2.5.3 through 2.7.1 TensorFlow version 2.8.0 is not affected, as it includes the fix.

Description An attacker can craft a TFLite model that would allow limited reads and writes outside of arrays in TFLite. This exploits missing validation in the conversion from sparse tensors to dense tensors.

Recommendations For TensorFlow versions 2.5.3, 2.6.3, and 2.7.1, upgrade to the respective patched versions as soon as possible. For TensorFlow versions prior to 2.8.0, upgrade to version 2.8.0 or later to resolve the issue. As a temporary workaround, consider restricting the use of TFLite models until a patch is applied.

Exploit

Fix

Out of bounds Read

Memory Corruption

Weakness Enumeration

CWE-125

CWE-787

Related Identifiers

BIT-TENSORFLOW-2022-23560

CVE-2022-23560

GHSA-4HVF-HXVG-F67V

OPENSUSE-SU-2024:12116-1

PYSEC-2022-124

PYSEC-2022-69

Affected Products

Tensorflow

References · 14

• 🔥 https://github.com/tensorflow/tensorflow/blob/ca6f96b62ad84207fbec580404eaa7dd7403a550/tensorflow/lite/kernels/internal/utils/sparsity_format_converter.cc#L252-L293 · Exploit
• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/23xxx/CVE-2022-23560.json · Exploit
• https://github.com/tensorflow/tensorflow/security/advisories/GHSA-4hvf-hxvg-f67v · Patch
• https://github.com/tensorflow/tensorflow/commit/6364463d6f5b6254cac3d6aedf999b6a96225038 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2022-23560 · Security Note
• https://osv.dev/vulnerability/GHSA-4hvf-hxvg-f67v · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-23560 · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2022-124 · Vendor Advisory
• https://osv.dev/vulnerability/BIT-tensorflow-2022-23560 · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2022-69 · Vendor Advisory
• https://github.com/tensorflow/tensorflow · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-124.yaml · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-69.yaml · Note
• https://t.me/cibsecurity/36890 · Telegram Post