AI and data stack advisories

Severe, 6 weeks1498Projects326

1498 severe, 6 weeks · 326 projects

TensorFlowGHSA-c94w-c95p-phf8

Integer overflow in Tensorflow

TensorFlow

CVE-2022-23575 · Published Feb 10, 2022 · updated Jul 13, 2026

High6.5
Fix: upgrade to 2.5.3 or later (3 fixed versions below)
GitHub advisory

Impact

The [implementation of OpLevelCostEstimator::CalculateTensorSize](https://github.com/tensorflow/tensorflow/blob/a1320ec1eac186da1d03f033109191f715b2b130/tensorflow/core/grappler/costs/op_level_cost_estimator.cc#L1552-L1558) is vulnerable to an integer overflow if an attacker can create an operation which would involve a tensor with large enough number of elements:

```cc

int64_t OpLevelCostEstimator::CalculateTensorSize(

const OpInfo::TensorProperties& tensor, bool* found_unknown_shapes) {

int64_t count = CalculateTensorElementCount(tensor, found_unknown_shapes);

int size = DataTypeSize(BaseType(tensor.dtype()));

VLOG(2) << "Count: " << count << " DataTypeSize: " << size;

return count * size;

}

`

Here, count and size can be large enough to cause count * size to overflow.

Patches

We have patched the issue in GitHub commit [fcd18ce3101f245b083b30655c27b239dc72221e](https://github.com/tensorflow/tensorflow/commit/fcd18ce3101f245b083b30655c27b239dc72221e).

The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range.

For more information

Please consult [our security guide](https://github.com/tensorflow/tensorflow/blob/master/SECURITY.md) for more information regarding the security model and how to...

Affected versions

PackageAffectedFixed in
tensorflow
PyPI
< 2.5.32.5.3
>= 2.6.0, < 2.6.32.6.3
>= 2.7.0, < 2.7.12.7.1
Details and references

### Impact The [implementation of `OpLevelCostEstimator::CalculateTensorSize`](https://github.com/tensorflow/tensorflow/blob/a1320ec1eac186da1d03f033109191f715b2b130/tensorflow/core/grappler/costs/op_level_cost_estimator.cc#L1552-L1558) is vulnerable to an integer overflow if an attacker can create an operation which would involve a tensor with large enough number of elements: ```cc int64_t OpLevelCostEstimator::CalculateTensorSize( const OpInfo::TensorProperties& tensor, bool* found_unknown_shapes) { int64_t count = CalculateTensorElementCount(tensor, found_unknown_shapes); int size = DataTypeSize(BaseType(tensor.dtype())); VLOG(2) << "Count: " << count << " DataTypeSize: " << size; return count * size; } ``` Here, `count` and `size` can be large enough to cause `count * size` to overflow. ### Patches We have patched the issue in GitHub commit [fcd18ce3101f245b083b30655c27b239dc72221e](https://github.com/tensorflow/tensorflow/commit/fcd18ce3101f245b083b30655c27b239dc72221e). The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range. ### For more information Please consult [our security guide](https://github.com/tensorflow/tensorflow/blob/master/SECURITY.md) for more information regarding the security model and how to contact us with issues and questions.

CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Severity from
GitHub (reviewed advisory)
Weakness
CWE-190
Also known as
BIT-tensorflow-2022-23575, CVE-2022-23575, PYSEC-2022-139, PYSEC-2022-84, PYSEC-2026-3160

More TensorFlow advisories

All TensorFlow
Medium 6.5Feb 10, 2022`CHECK`-failures in binary ops in TensorflowCVE-2022-23583fixed in 2.5.3 +2Medium 6.5Feb 10, 2022`CHECK`-failures in `TensorByteSize` in TensorflowCVE-2022-23582fixed in 2.5.3 +2Medium 6.5Feb 10, 2022`CHECK`-failures during Grappler's `SafeToRemoveIdentity` in TensorflowCVE-2022-23579fixed in 2.5.3 +2Medium 4.3Feb 10, 2022Memory leak in TensorflowCVE-2022-23578fixed in 2.5.3 +2High 6.5Feb 10, 2022Integer overflow in TensorflowCVE-2022-23576fixed in 2.5.3 +2High 6.5Feb 10, 2022Null-dereference in TensorflowCVE-2022-23577fixed in 2.5.3 +2