GCVE - cpe:2.3:a:google:tensorflow:2.9.0:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:google:tensorflow:2.9.0:*:*:*:*:*:*:*

part: a version: 2.9.0 update: *

Vendor	Google (`f181d1eb-7269-5bae-b76e-e66ceb214562`)
Product	Tensorflow (`b00eb799-7f6b-5a1c-af79-6e563231bc87`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2022-35963`	vulnerable	2026-06-08 05:46:06.067510	`CHECK` failures in `FractionalAvgPoolGrad` in TensorFlow MEDIUM (5.9) TensorFlow is an open source platform for machine learning. The implementation of `FractionalAvgPoolGrad` does not fully validate the input `orig_input_tensor_shape`. This results in an overflow that results in a `CHECK` failure which can be used to trigger a denial of service attack. We have patched the issue in GitHub commit 03a659d7be9a1154fdf5eeac221e5950fec07dad. The fix will be included in TensorFlow 2.10.0. We will also cherrypick this commit on TensorFlow 2.9.1, TensorFlow 2.8.1, and TensorFlow 2.7.2, as these are also affected and still in supported range. There are no known workarounds for this issue. Published: 2022-09-16T20:10:10.000Z Updated: 2025-04-23T17:03:41.735Z Open on db.gcve.eu Reference links https://github.com/tensorflow/tensorflow/security/advisories/GHSA-84jm-4cf3-9jfm https://github.com/tensorflow/tensorflow/commit/03a659d7be9a1154fdf5eeac221e5950fec07dad	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-35960`	vulnerable	2026-06-08 05:46:06.061731	`CHECK` failure in `TensorListReserve` in TensorFlow MEDIUM (5.9) TensorFlow is an open source platform for machine learning. In `core/kernels/list_kernels.cc's TensorListReserve`, `num_elements` is assumed to be a tensor of size 1. When a `num_elements` of more than 1 element is provided, then `tf.raw_ops.TensorListReserve` fails the `CHECK_EQ` in `CheckIsAlignedAndSingleElement`. We have patched the issue in GitHub commit b5f6fbfba76576202b72119897561e3bd4f179c7. The fix will be included in TensorFlow 2.10.0. We will also cherrypick this commit on TensorFlow 2.9.1, TensorFlow 2.8.1, and TensorFlow 2.7.2, as these are also affected and still in supported range. There are no known workarounds for this issue. Published: 2022-09-16T20:00:15.000Z Updated: 2025-04-23T17:03:48.088Z Open on db.gcve.eu Reference links https://github.com/tensorflow/tensorflow/security/advisories/GHSA-v5xg-3q2c-c2r4 https://github.com/tensorflow/tensorflow/commit/b5f6fbfba76576202b72119897561e3bd4f179c7 https://github.com/tensorflow/tensorflow/blob/c8ba76d48567aed347508e0552a257641931024d/tensorflow/core/kernels/list_kernels.cc#L322-L325	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-35959`	vulnerable	2026-06-08 05:46:06.060941	`CHECK` failures in `AvgPool3DGrad` in TensorFlow MEDIUM (5.9) TensorFlow is an open source platform for machine learning. The implementation of `AvgPool3DGradOp` does not fully validate the input `orig_input_shape`. This results in an overflow that results in a `CHECK` failure which can be used to trigger a denial of service attack. We have patched the issue in GitHub commit 9178ac9d6389bdc54638ab913ea0e419234d14eb. The fix will be included in TensorFlow 2.10.0. We will also cherrypick this commit on TensorFlow 2.9.1, TensorFlow 2.8.1, and TensorFlow 2.7.2, as these are also affected and still in supported range. There are no known workarounds for this issue. Published: 2022-09-16T19:55:11.000Z Updated: 2025-04-23T17:03:53.520Z Open on db.gcve.eu Reference links https://github.com/tensorflow/tensorflow/security/advisories/GHSA-wxjj-cgcx-r3vq https://github.com/tensorflow/tensorflow/commit/9178ac9d6389bdc54638ab913ea0e419234d14eb	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.