CVE-2022-23565 | BDVDB-2026-169261 Detail

Description#

Tensorflow is an Open Source Machine Learning Framework. An attacker can trigger denial of service via assertion failure by altering a `SavedModel` on disk such that `AttrDef`s of some operation are duplicated. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12022-02-04Record published in the CVE List.
2. Version 22025-04-23Most recent update recorded in the CVE List.