PT-2022-19466

CVE-2022-29213

Published

2022-05-20

Updated

2026-07-09

Description by

CVSS 3.1

5.5

Medium

MetricsAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions TensorFlow versions prior to 2.9.0 TensorFlow versions prior to 2.8.1 TensorFlow versions prior to 2.7.2 TensorFlow versions prior to 2.6.4

Description The issue is related to the lack of input validation in the tf.compat.v1.signal.rfft2d and tf.compat.v1.signal.rfft3d functions, which can result in crashes due to CHECK-failures under certain conditions.

Recommendations For versions prior to 2.9.0, update to version 2.9.0 or later. For versions prior to 2.8.1, update to version 2.8.1 or later. For versions prior to 2.7.2, update to version 2.7.2 or later. For versions prior to 2.6.4, update to version 2.6.4 or later.

Exploitability

Exploit

Fix

Impacts

Researchers

Mihaimaruseac

Vendors

Affected products

Weakness enumeration

CWE-617: Reachable Assertion

CWE-20: Improper Input Validation

Related identifiers