PT-2022-26142 · Google · Tensorflow

Published 2022-11-18 · Updated 2024-03-06 · CVE-2022-41911

Positive Technologies (AI Summary)

CVSS v3.1

4.8

Medium

Base vector

AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions TensorFlow versions prior to 2.11.0 TensorFlow versions 2.10.1 and earlier TensorFlow versions 2.9.3 and earlier TensorFlow versions 2.8.4 and earlier

Description The issue arises when printing a tensor, as the data is retrieved as a const char* array and then typecast to the element type. However, conversions from char to bool are undefined if the char is not 0 or 1, causing sanitizers and fuzzers to crash. The vulnerability was discovered via internal fuzzing.

Recommendations For TensorFlow versions prior to 2.11.0, update to version 2.11.0 or later. For TensorFlow versions 2.10.1 and earlier, update to version 2.10.1 or later, or apply the patch from GitHub commit 1be74370327. For TensorFlow versions 2.9.3 and earlier, update to version 2.9.3 or later, or apply the patch from GitHub commit 1be74370327. For TensorFlow versions 2.8.4 and earlier, update to version 2.8.4 or later, or apply the patch from GitHub commit 1be74370327. As a temporary workaround, consider avoiding the printing of tensors that may contain boolean values until the issue is resolved.

Exploit

Fix

Incorrect Type Conversion or Cast

Weakness Enumeration

CWE-704

Related Identifiers

AZL-11544

BIT-TENSORFLOW-2022-41911

CVE-2022-41911

GHSA-PF36-R9C6-H97J

Affected Products

Tensorflow

References · 11

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/41xxx/CVE-2022-41911.json · Exploit
• https://github.com/tensorflow/tensorflow/commit/1be743703279782a357adbf9b77dcb994fe8b508 · Patch
• https://github.com/tensorflow/tensorflow/security/advisories/GHSA-pf36-r9c6-h97j · Patch
• https://github.com/tensorflow/tensorflow/blob/807cae8a807960fd7ac2313cde73a11fc15e7942/tensorflow/core/framework/tensor.cc#L1200-L1227 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2022-41911 · Security Note
• https://osv.dev/vulnerability/AZL-11544 · Vendor Advisory
• https://osv.dev/vulnerability/BIT-tensorflow-2022-41911 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-41911 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-pf36-r9c6-h97j · Vendor Advisory
• https://github.com/tensorflow/tensorflow · Note
• https://t.me/cibsecurity/53182 · Telegram Post