TensorFlowGHSA-4j82-5ccr-4r8v

`CHECK`-failures in `TensorByteSize` in Tensorflow

CVE-2022-23582 · Published Feb 10, 2022 · updated Jul 13, 2026

Medium6.5

Fix: upgrade to 2.5.3 or later (3 fixed versions below)

Impact

A malicious user can cause a denial of service by altering a SavedModel such that [TensorByteSize](https://github.com/tensorflow/tensorflow/blob/a1320ec1eac186da1d03f033109191f715b2b130/tensorflow/core/framework/attr_value_util.cc#L46-L50) would trigger CHECK failures.

```cc

int64_t TensorByteSize(const TensorProto& t) {

// num_elements returns -1 if shape is not fully defined.

int64_t num_elems = TensorShape(t.tensor_shape()).num_elements();

return num_elems < 0 ? -1 : num_elems * DataTypeSize(t.dtype());

}

TensorShape constructor throws a CHECK-fail if shape is partial or has a number of elements that would overflow the size of an int. The PartialTensorShape constructor instead does not cause a CHECK-abort if the shape is partial, which is exactly what this function needs to be able to return -1.

Patches

We have patched the issue in GitHub commit [c2426bba00a01de6913738df8fa78e0215fcce02](https://github.com/tensorflow/tensorflow/commit/c2426bba00a01de6913738df8fa78e0215fcce02).

The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range.

For more information

Please consult [our security guide](https://github.com/tensorflow/tensorflow/blob/master/SECURITY.md) for more information regarding...

Affected versions

Package	Affected	Fixed in
tensorflow PyPI	< 2.5.3	2.5.3
	>= 2.6.0, < 2.6.3	2.6.3
	>= 2.7.0, < 2.7.1	2.7.1

Details and references

### Impact A malicious user can cause a denial of service by altering a `SavedModel` such that [`TensorByteSize`](https://github.com/tensorflow/tensorflow/blob/a1320ec1eac186da1d03f033109191f715b2b130/tensorflow/core/framework/attr_value_util.cc#L46-L50) would trigger `CHECK` failures. ```cc int64_t TensorByteSize(const TensorProto& t) { // num_elements returns -1 if shape is not fully defined. int64_t num_elems = TensorShape(t.tensor_shape()).num_elements(); return num_elems < 0 ? -1 : num_elems * DataTypeSize(t.dtype()); } ``` `TensorShape` constructor throws a `CHECK`-fail if shape is partial or has a number of elements that would overflow the size of an `int`. The `PartialTensorShape` constructor instead does not cause a `CHECK`-abort if the shape is partial, which is exactly what this function needs to be able to return `-1`. ### Patches We have patched the issue in GitHub commit [c2426bba00a01de6913738df8fa78e0215fcce02](https://github.com/tensorflow/tensorflow/commit/c2426bba00a01de6913738df8fa78e0215fcce02). The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range. ### For more information Please consult [our security guide](https://github.com/tensorflow/tensorflow/blob/master/SECURITY.md) for more information regarding the security model and how to contact us with issues and questions.

CVSS 3.1: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Severity from: GitHub (reviewed advisory)
Weakness: CWE-617
Also known as: BIT-tensorflow-2022-23582, CVE-2022-23582, PYSEC-2022-146, PYSEC-2022-91, PYSEC-2026-3100

More TensorFlow advisories

All TensorFlow

Medium 6.5Feb 10, 2022

`CHECK`-failures in binary ops in TensorflowCVE-2022-23583fixed in 2.5.3 +2 Medium 6.5Feb 10, 2022

`CHECK`-failures during Grappler's `SafeToRemoveIdentity` in TensorflowCVE-2022-23579fixed in 2.5.3 +2 Medium 4.3Feb 10, 2022

Memory leak in TensorflowCVE-2022-23578fixed in 2.5.3 +2 High 6.5Feb 10, 2022

Integer overflow in TensorflowCVE-2022-23575fixed in 2.5.3 +2 High 6.5Feb 10, 2022

Integer overflow in TensorflowCVE-2022-23576fixed in 2.5.3 +2 High 6.5Feb 10, 2022

Null-dereference in TensorflowCVE-2022-23577fixed in 2.5.3 +2