PyPI/tensorflow-cpu CVE-2022-41880: medium 6.8, EPSS 0.41%

Tensorflow vulnerable to Out-of-Bounds Read

Action: Upgrade tensorflow-cpu to 2.8.4 or later.

pip install tensorflow-cpu==2.8.4

pip install tensorflow-cpu==2.9.3

pip install tensorflow-cpu==2.10.1

Affected

Fixed versions

Sources

• osv: PYSEC-2026-3298
• https://github.com/tensorflow/tensorflow/security/advisories/GHSA-8w5g-3wcv-9g2j
• https://nvd.nist.gov/vuln/detail/CVE-2022-41880
• https://github.com/tensorflow/tensorflow/commit/b389f5c944cadfdfe599b3f1e4026e036f30d2d4
• https://github.com/tensorflow/tensorflow
• https://github.com/tensorflow/tensorflow/blob/master/tensorflow/core/kernels/candidate_sampler_ops.cc
• https://pypi.org/project/tensorflow-cpu
• https://github.com/advisories/GHSA-8w5g-3wcv-9g2j

CVE-2022-41880 · published 2026-07-13T14:19:56.592199Z · modified 2026-07-13T16:43:00.919386427Z · JSON