PyPI/tensorflow-cpu CVE-2022-41883: medium 6.8, EPSS 0.38%

Out of bounds segmentation fault due to unequal op inputs in Tensorflow

Action: Upgrade tensorflow-cpu to 2.10.1 or later.

pip install tensorflow-cpu==2.10.1

Affected

Fixed versions

Sources

• osv: GHSA-w58w-79xv-6vcj#PyPI/tensorflow-cpu
• https://github.com/tensorflow/tensorflow/security/advisories/GHSA-w58w-79xv-6vcj
• https://nvd.nist.gov/vuln/detail/CVE-2022-41883
• https://github.com/tensorflow/tensorflow/commit/f5381e0e10b5a61344109c1b7c174c68110f7629
• https://github.com/tensorflow/tensorflow
• https://github.com/tensorflow/tensorflow/blob/master/tensorflow/core/kernels/dynamic_stitch_op.cc
• https://github.com/tensorflow/tensorflow/blob/master/tensorflow/core/ops/data_flow_ops.cc

CVE-2022-41883 · published 2022-11-21T20:39:20Z · modified 2026-07-13T16:42:49.026599256Z · JSON