CVE-2022-23571: Reachable Assertion in Tensorflow
6.5
CVSS Score
3.1
Basic Information
CVE ID
GHSA ID
EPSS Score
0.30572%
CWE
Published
2/9/2022
Updated
11/13/2024
KEV Status
No
Technology
Python
PythonTechnical Details
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| tensorflow | pip | < 2.5.3 | 2.5.3 |
| tensorflow | pip | >= 2.6.0, < 2.6.3 | 2.6.3 |
| tensorflow | pip | = 2.7.0 | 2.7.1 |
| tensorflow-cpu | pip | < 2.5.3 | 2.5.3 |
| tensorflow-cpu | pip | >= 2.6.0, < 2.6.3 | 2.6.3 |
| tensorflow-cpu | pip | = 2.7.0 | 2.7.1 |
| tensorflow-gpu | pip | < 2.5.3 | 2.5.3 |
| tensorflow-gpu | pip | >= 2.6.0, < 2.6.3 | 2.6.3 |
| tensorflow-gpu | pip | = 2.7.0 | 2.7.1 |
Vulnerability Intelligence
Miggo AI
Miggo AIRoot Cause Analysis
The vulnerability stems from insufficient validation in the tensor deserialization path. The commit 5b491cd5e41ad63735161cec9c2a568172c8b6a3 adds validation for proto.dtype() in the else-clause handling empty/invalid-shaped tensors, which was previously missing. The Tensor::FromProto function in tensor.cc is the core deserialization routine where this validation gap existed, making it the clear vulnerable entry point. The direct correlation between the vulnerability description (invalid dtype+shape causing assertion failures) and the patched code location confirms this assessment.