CVE-2022-23583

Name of the Vulnerable Software and Affected Versions TensorFlow versions prior to 2.8.0 TensorFlow versions 2.7.1, 2.6.3, and 2.5.3 are also affected

Description A malicious user can cause a denial of service by altering a SavedModel such that any binary op would trigger CHECK failures. This occurs when the protobuf part corresponding to the tensor arguments is modified such that the dtype no longer matches the dtype expected by the op. If Tin and Tout don't match the type of data in out and input * tensors then flat<*> would interpret it wrongly, resulting in a CHECK crash and hence a denial of service.

Recommendations For TensorFlow versions prior to 2.8.0, update to version 2.8.0 or later to resolve the issue. For TensorFlow version 2.7.1, update to a newer version that includes the cherrypicked commit. For TensorFlow version 2.6.3, update to a newer version that includes the cherrypicked commit. For TensorFlow version 2.5.3, update to a newer version that includes the cherrypicked commit. As a temporary workaround, consider restricting the use of SavedModel to minimize the risk of exploitation.