PyPI/tensorflow CVE-2022-41880: medium 6.8, EPSS 0.41%
Tensorflow vulnerable to Out-of-Bounds Read
Action: Upgrade tensorflow to 2.8.4 or later.
pip install tensorflow==2.10.1pip install tensorflow==2.8.4pip install tensorflow==2.9.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.10.0 | 2.10.1 | - |
| 0 | 2.8.4 | - |
| 2.9.0 | 2.9.3 | - |
Fixed versions
| 2.10.1 | 2.8.4 | 2.9.3 |
Sources
- osv: GHSA-8w5g-3wcv-9g2j
- https://github.com/tensorflow/tensorflow/security/advisories/GHSA-8w5g-3wcv-9g2j
- https://nvd.nist.gov/vuln/detail/CVE-2022-41880
- https://github.com/tensorflow/tensorflow/commit/b389f5c944cadfdfe599b3f1e4026e036f30d2d4
- https://github.com/tensorflow/tensorflow
- https://github.com/tensorflow/tensorflow/blob/master/tensorflow/core/kernels/candidate_sampler_ops.cc
CVE-2022-41880 · published · modified · JSON