TensorFlowGHSA-f2vv-v9cg-qhh7

Assertion failure based denial of service in Tensorflow

CVE-2022-21737 · Published Feb 9, 2022 · updated Sep 10, 2026

High6.5

Fix: upgrade to 2.5.3 or later (3 fixed versions below)

Impact

The [implementation of *Bincount operations](https://github.com/tensorflow/tensorflow/blob/5100e359aef5c8021f2e71c7b986420b85ce7b3d/tensorflow/core/kernels/bincount_op.cc) allows malicious users to cause denial of service by passing in arguments which would trigger a CHECK-fail:

```python

import tensorflow as tf

tf.raw_ops.DenseBincount(

input=[[0], [1], [2]],

size=[1],

weights=[3,2,1],

binary_output=False)

There are several conditions that the input arguments must satisfy. Some are not caught during shape inference and others are not caught during kernel implementation. This results in CHECK failures later when the output tensors get allocated.

Patches

We have patched the issue in GitHub commit [7019ce4f68925fd01cdafde26f8d8c938f47e6f9](https://github.com/tensorflow/tensorflow/commit/7019ce4f68925fd01cdafde26f8d8c938f47e6f9).

The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range.

For more information

Please consult [our security guide](https://github.com/tensorflow/tensorflow/blob/master/SECURITY.md) for more information regarding the security model and how to contact us with issues and questions.

Attribution

This vulnerability has been reported by Faysal Hossain Shezan from University...

Affected versions

Package	Affected	Fixed in
tensorflow PyPI	< 2.5.3	2.5.3
	>= 2.6.0, < 2.6.3	2.6.3
	>= 2.7.0, < 2.7.1	2.7.1

Details and references

### Impact The [implementation of `*Bincount` operations](https://github.com/tensorflow/tensorflow/blob/5100e359aef5c8021f2e71c7b986420b85ce7b3d/tensorflow/core/kernels/bincount_op.cc) allows malicious users to cause denial of service by passing in arguments which would trigger a `CHECK`-fail: ```python import tensorflow as tf tf.raw_ops.DenseBincount( input=[[0], [1], [2]], size=[1], weights=[3,2,1], binary_output=False) ``` There are several conditions that the input arguments must satisfy. Some are not caught during shape inference and others are not caught during kernel implementation. This results in `CHECK` failures later when the output tensors get allocated. ### Patches We have patched the issue in GitHub commit [7019ce4f68925fd01cdafde26f8d8c938f47e6f9](https://github.com/tensorflow/tensorflow/commit/7019ce4f68925fd01cdafde26f8d8c938f47e6f9). The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range. ### For more information Please consult [our security guide](https://github.com/tensorflow/tensorflow/blob/master/SECURITY.md) for more information regarding the security model and how to contact us with issues and questions. ### Attribution This vulnerability has been reported by Faysal Hossain Shezan from University of Virginia.

CVSS 3.1: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Severity from: GitHub (reviewed advisory)
Weakness: CWE-617, CWE-754
Also known as: BIT-tensorflow-2022-21737, CVE-2022-21737, PYSEC-2022-116, PYSEC-2022-61, PYSEC-2026-3164

More TensorFlow advisories

All TensorFlow

High 7.6Feb 9, 2022

Use after free in `DecodePng` kernelCVE-2022-23584fixed in 2.5.3 +2 High 8.8Feb 9, 2022

Out of bounds write in TensorflowCVE-2022-23566fixed in 2.5.3 +2 High 6.5Feb 9, 2022

Reachable Assertion in TensorflowCVE-2022-23564fixed in 2.5.3 +2 High 7.1Feb 9, 2022

Insecure temporary file in TensorflowCVE-2022-23563fixed in 2.5.3 +2 High 7.6Feb 9, 2022

Integer overflow in TensorflowCVE-2022-23562fixed in 2.5.3 +2 High 8.8Feb 9, 2022

Out of bounds write in TFLiteCVE-2022-23561fixed in 2.5.3 +2