PyPI/tensorflow-cpu CVE-2022-41886: medium 4.8, EPSS 0.46%

Overflow in `ImageProjectiveTransformV2`

Action: Upgrade tensorflow-cpu to 2.8.4 or later.

pip install tensorflow-cpu==2.8.4

pip install tensorflow-cpu==2.9.3

pip install tensorflow-cpu==2.10.1

Affected

Fixed versions

Sources

• osv: PYSEC-2026-3275
• https://github.com/tensorflow/tensorflow/security/advisories/GHSA-54pp-c6pp-7fpx
• https://nvd.nist.gov/vuln/detail/CVE-2022-41886
• https://github.com/tensorflow/tensorflow/commit/8faa6ea692985dbe6ce10e1a3168e0bd60a723ba
• https://github.com/tensorflow/tensorflow
• https://github.com/tensorflow/tensorflow/blob/master/tensorflow/core/kernels/image/image_ops.cc
• https://pypi.org/project/tensorflow-cpu
• https://github.com/advisories/GHSA-54pp-c6pp-7fpx

CVE-2022-41886 · published 2026-07-13T14:19:52.081279Z · modified 2026-07-13T16:42:54.056913503Z · JSON