AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

TensorFlowGHSA-54ch-gjq5-4976

Segfault due to missing support for quantized types

TensorFlow

CVE-2022-29205 · Published May 24, 2022 · updated Jul 13, 2026

Medium5.5
Fix: upgrade to 2.6.4 or later (3 fixed versions below)
GitHub advisory

Impact

There is a potential for segfault / denial of service in TensorFlow by calling tf.compat.v1.* ops which don't yet have support for quantized types (added after migration to TF 2.x):

```python

import numpy as np

import tensorflow as tf

tf.compat.v1.placeholder_with_default(input=np.array([2]),shape=tf.constant(dtype=tf.qint8, value=np.array([1])))

`

In these scenarios, since the kernel is missing, a [nullptr value is passed](https://github.com/tensorflow/tensorflow/blob/f3b9bf4c3c0597563b289c0512e98d4ce81f886e/tensorflow/python/eager/pywrap_tfe_src.cc#L480-L482) to [ParseDimensionValue](https://github.com/tensorflow/tensorflow/blob/f3b9bf4c3c0597563b289c0512e98d4ce81f886e/tensorflow/python/eager/pywrap_tfe_src.cc#L296-L320) for the py_value argument. Then, this is dereferenced, resulting in segfault.

Patches

We have patched the issue in GitHub commit [237822b59fc504dda2c564787f5d3ad9c4aa62d9](https://github.com/tensorflow/tensorflow/commit/237822b59fc504dda2c564787f5d3ad9c4aa62d9).

The fix will be included in TensorFlow 2.9.0. We will also cherrypick this commit on TensorFlow 2.8.1, TensorFlow 2.7.2, and TensorFlow 2.6.4, as these are also affected and still in supported range.

For more information

Please consult [our security guide](https://github.com/tensorflow/tensorflow/blob/master/SECURITY.md) for more information regarding the security...

Affected versions

PackageAffectedFixed in
tensorflow
PyPI
< 2.6.42.6.4
>= 2.7.0, < 2.7.22.7.2
>= 2.8.0, < 2.8.12.8.1
Details and references

### Impact There is a potential for segfault / denial of service in TensorFlow by calling `tf.compat.v1.*` ops which don't yet have support for quantized types (added after migration to TF 2.x): ```python import numpy as np import tensorflow as tf tf.compat.v1.placeholder_with_default(input=np.array([2]),shape=tf.constant(dtype=tf.qint8, value=np.array([1]))) ``` In these scenarios, since the kernel is missing, a [`nullptr` value is passed](https://github.com/tensorflow/tensorflow/blob/f3b9bf4c3c0597563b289c0512e98d4ce81f886e/tensorflow/python/eager/pywrap_tfe_src.cc#L480-L482) to [`ParseDimensionValue`](https://github.com/tensorflow/tensorflow/blob/f3b9bf4c3c0597563b289c0512e98d4ce81f886e/tensorflow/python/eager/pywrap_tfe_src.cc#L296-L320) for the `py_value` argument. Then, this is dereferenced, resulting in segfault. ### Patches We have patched the issue in GitHub commit [237822b59fc504dda2c564787f5d3ad9c4aa62d9](https://github.com/tensorflow/tensorflow/commit/237822b59fc504dda2c564787f5d3ad9c4aa62d9). The fix will be included in TensorFlow 2.9.0. We will also cherrypick this commit on TensorFlow 2.8.1, TensorFlow 2.7.2, and TensorFlow 2.6.4, as these are also affected and still in supported range. ### For more information Please consult [our security guide](https://github.com/tensorflow/tensorflow/blob/master/SECURITY.md) for more information regarding the security model and how to contact us with issues and questions. ### Attribution This vulnerability has been reported by Hong Jin from Singapore Management University.

CVSS 3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Severity from
GitHub (reviewed advisory)
Weakness
CWE-476, CWE-908
Also known as
BIT-tensorflow-2022-29205, CVE-2022-29205, PYSEC-2026-3104, PYSEC-2026-3274, PYSEC-2026-950

More TensorFlow advisories

All TensorFlow
High 7.8May 24, 2022Code injection in `saved_model_cli` in TensorFlowCVE-2022-29216fixed in 2.6.4 +2Medium 5.5May 24, 2022Incomplete validation in signal ops leads to crashes in TensorFlowCVE-2022-29213fixed in 2.6.4 +2Medium 5.5May 24, 2022Core dump when loading TFLite models with quantization in TensorFlowCVE-2022-29212fixed in 2.6.4 +2Medium 5.5May 24, 2022Segfault if `tf.histogram_fixed_width` is called with NaN values in TensorFlowCVE-2022-29211fixed in 2.6.4 +2Medium 5.5May 24, 2022Heap buffer overflow due to incorrect hash function in TensorFlowCVE-2022-29210fixed in 2.8.1Medium 5.5May 24, 2022Type confusion leading to `CHECK`-failure based denial of service in TensorFlowCVE-2022-29209fixed in 2.6.4 +2