Skip to content
OpenAdvisories
High · 8.8 CVE-2022-23559 BIT-tensorflow-2022-23559EUVD-2022-0307GHSA-98p5-x8x4-c9m5PYSEC-2022-123PYSEC-2022-68PYSEC-2026-3146

Integer overflow in TFLite

Published Feb 4, 2022 · Updated Apr 22, 2025 · Assigned by GitHub_M

Vendor: TensorFlow Product: TensorFlow Package: tensorflow Package: tensorflow-cpu Package: tensorflow-gpu Ecosystem: PyPI

Description

Tensorflow is an Open Source Machine Learning Framework. An attacker can craft a TFLite model that would cause an integer overflow in embedding lookup operations. Both `embedding_size` and `lookup_size` are products of values provided by the user. Hence, a malicious user could trigger overflows in the multiplication. In certain scenarios, this can then result in heap OOB read/write. Users are advised to upgrade to a patched version.

Affected products

VendorProductAffectedFixed
tensorflow tensorflow >= 2.7.0, < 2.7.1, >= 2.6.0, < 2.6.3, < 2.5.3 —

Affected packages

EcosystemPackageAffectedFixedRecord
PyPI tensorflow < 2.5.3 2.5.3 GHSA-98p5-x8x4-c9m5
PyPI tensorflow >= 2.6.0, < 2.6.3 2.6.3 GHSA-98p5-x8x4-c9m5
PyPI tensorflow >= 2.7.0, < 2.7.1 2.7.1 GHSA-98p5-x8x4-c9m5
PyPI tensorflow < 2.5.3 · >= 2.6.0, < 2.6.3 · >= 2.7.0, < 2.7.1 2.5.3, 2.6.3, 2.7.1 PYSEC-2026-3146
PyPI tensorflow-cpu < 2.5.3 2.5.3 GHSA-98p5-x8x4-c9m5
PyPI tensorflow-cpu >= 2.6.0, < 2.6.3 2.6.3 GHSA-98p5-x8x4-c9m5
PyPI tensorflow-cpu >= 2.7.0, < 2.7.1 2.7.1 GHSA-98p5-x8x4-c9m5
PyPI tensorflow-cpu < 2.5.3 · >= 2.6.0, < 2.6.3 2.5.3, 2.6.3 PYSEC-2022-68
PyPI tensorflow-gpu < 2.5.3 2.5.3 GHSA-98p5-x8x4-c9m5
PyPI tensorflow-gpu >= 2.6.0, < 2.6.3 2.6.3 GHSA-98p5-x8x4-c9m5
PyPI tensorflow-gpu >= 2.7.0, < 2.7.1 2.7.1 GHSA-98p5-x8x4-c9m5
PyPI tensorflow-gpu < 2.5.3 · >= 2.6.0, < 2.6.3 2.5.3, 2.6.3 PYSEC-2022-123

References