PT-2022-26126 · Google · Tensorflow

Yu Tian · CVE-2022-41895 · Published 2022-11-18 · Updated 2026-07-13

Positive Technologies (AI Summary)

CVSS v3.1

4.8

Medium

Base vector

AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions TensorFlow versions prior to 2.11 TensorFlow versions 2.10.1 and earlier TensorFlow versions 2.9.3 and earlier TensorFlow versions 2.8.4 and earlier

Description The issue arises when the MirrorPadGrad function is given oversized input paddings, resulting in a heap OOB error. This can be triggered by providing large values for the paddings parameter, such as [[0x77f00000,0xa000000]], in the tf.raw ops.MirrorPadGrad operation with the mode set to 'REFLECT'.

Recommendations For versions prior to 2.11, update to TensorFlow 2.11 or later. For versions 2.10.1 and earlier, update to TensorFlow 2.10.1 or later, or apply the patch from GitHub commit 717ca98d8c3bba348ff62281fdf38dcb5ea1ec92. For versions 2.9.3 and earlier, update to TensorFlow 2.9.3 or later, or apply the patch from GitHub commit 717ca98d8c3bba348ff62281fdf38dcb5ea1ec92. For versions 2.8.4 and earlier, update to TensorFlow 2.8.4 or later, or apply the patch from GitHub commit 717ca98d8c3bba348ff62281fdf38dcb5ea1ec92. As a temporary workaround, consider restricting the input values for the paddings parameter in the tf.raw ops.MirrorPadGrad operation to prevent oversized inputs.

Exploit

Fix

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

AZL-11533

BIT-TENSORFLOW-2022-41895

CVE-2022-41895

GHSA-GQ2J-CR96-GVQX

PYSEC-2026-1000

PYSEC-2026-3192

PYSEC-2026-3332

Affected Products

Tensorflow

References · 17

• 🔥 https://github.com/tensorflow/tensorflow/security/advisories/GHSA-gq2j-cr96-gvqx · Exploit
• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/41xxx/CVE-2022-41895.json · Exploit
• https://github.com/tensorflow/tensorflow/commit/717ca98d8c3bba348ff62281fdf38dcb5ea1ec92 · Patch
• https://osv.dev/vulnerability/GHSA-gq2j-cr96-gvqx · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-41895 · Vendor Advisory
• https://osv.dev/vulnerability/BIT-tensorflow-2022-41895 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-41895 · Security Note
• https://osv.dev/vulnerability/PYSEC-2026-3192 · Vendor Advisory
• https://osv.dev/vulnerability/AZL-11533 · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2026-3332 · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2026-1000 · Vendor Advisory
• https://github.com/tensorflow/tensorflow · Note
• https://github.com/tensorflow/tensorflow/blob/master/tensorflow/core/kernels/image/mirror_pad_op.cc · Note
• https://github.com/advisories/GHSA-gq2j-cr96-gvqx · Note
• https://pypi.org/project/tensorflow-cpu · Note