PyPI/tensorflow-cpu CVE-2022-23592: high 8.1, EPSS 0.86%

Out of bounds read in Tensorflow

Action: Upgrade tensorflow-cpu to 2.8.0 or later.

pip install tensorflow-cpu==2.8.0

Affected

Fixed versions

Sources

• osv: GHSA-vq36-27g6-p492#PyPI/tensorflow-cpu
• https://github.com/tensorflow/tensorflow/security/advisories/GHSA-vq36-27g6-p492
• https://nvd.nist.gov/vuln/detail/CVE-2022-23592
• https://github.com/tensorflow/tensorflow/commit/c99d98cd189839dcf51aee94e7437b54b31f8abd
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2022-101.yaml
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2022-156.yaml
• https://github.com/tensorflow/tensorflow
• https://github.com/tensorflow/tensorflow/blob/274df9b02330b790aa8de1cee164b70f72b9b244/tensorflow/core/graph/graph.cc#L223-L229

CVE-2022-23592 · published 2022-02-09T23:31:48Z · modified 2026-07-13T16:43:45.786983761Z · JSON