CVE-2022-41886

Name of the Vulnerable Software and Affected Versions TensorFlow versions prior to 2.11 TensorFlow versions 2.10.1, 2.9.3, and 2.8.4

Description TensorFlow is an open source platform for machine learning. When tf.raw ops.ImageProjectiveTransformV2 is given a large output shape, it overflows. The issue has been patched in GitHub commit 8faa6ea692985dbe6ce10e1a3168e0bd60a723ba.

Recommendations For TensorFlow versions prior to 2.11, update to version 2.11 or later. For TensorFlow version 2.10.1, update to a version that includes the cherrypicked commit. For TensorFlow version 2.9.3, update to a version that includes the cherrypicked commit. For TensorFlow version 2.8.4, update to a version that includes the cherrypicked commit. As a temporary workaround, consider avoiding the use of tf.raw ops.ImageProjectiveTransformV2 with large output shapes until a patch is available.