PT-2022-19461

CVE-2022-29209

·

Published

2022-05-20

·

Updated

2026-07-09

Description by

CVSS 3.1
5.5
Medium
MetricsAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions TensorFlow versions prior to 2.9.0 TensorFlow versions prior to 2.8.1 TensorFlow versions prior to 2.7.2 TensorFlow versions prior to 2.6.4
Description TensorFlow is an open source platform for machine learning. The macros that TensorFlow uses for writing assertions (e.g., CHECK LT, CHECK GT, etc.) have an incorrect logic when comparing size t and int values. Due to type conversion rules, several of the macros would trigger incorrectly.
Recommendations For versions prior to 2.9.0, update to version 2.9.0 or later. For versions prior to 2.8.1, update to version 2.8.1 or later. For versions prior to 2.7.2, update to version 2.7.2 or later. For versions prior to 2.6.4, update to version 2.6.4 or later.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Related identifiers
GHSA-F4RR-5M7V-WXCW
BIT-TENSORFLOW-2022-29209
PYSEC-2026-3167
PYSEC-2026-3315
PYSEC-2026-986
Found an issue in the description? Have something to add? Feel free to write us 👾