PyPI/tensorflow-cpu CVE-2022-29210: medium 5.5, EPSS 0.23%

Heap buffer overflow due to incorrect hash function in TensorFlow

Action: Upgrade tensorflow-cpu to 2.8.1 or later.

pip install tensorflow-cpu==2.8.1

Affected

Fixed versions

Sources

• osv: GHSA-hc2f-7r5r-r2hg#PyPI/tensorflow-cpu
• https://github.com/tensorflow/tensorflow/security/advisories/GHSA-hc2f-7r5r-r2hg
• https://nvd.nist.gov/vuln/detail/CVE-2022-29210
• https://github.com/tensorflow/tensorflow/commit/1b85a28d395dc91f4d22b5f9e1e9a22e92ccecd6
• https://github.com/tensorflow/tensorflow
• https://github.com/tensorflow/tensorflow/blob/f3b9bf4c3c0597563b289c0512e98d4ce81f886e/tensorflow/core/framework/tensor_key.h#L53-L64
• https://github.com/tensorflow/tensorflow/releases/tag/v2.8.1
• https://github.com/tensorflow/tensorflow/releases/tag/v2.9.0

CVE-2022-29210 · published 2022-05-24T22:15:20Z · modified 2026-07-13T16:42:28.752579130Z · JSON