PT-2026-59842 · Pypi · Tensorflow
Published
2026-07-09
·
Updated
2026-07-09
CVSS v3.1
5.9
Medium
| Vector | AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H |
Impact
A
GraphDef from a TensorFlow SavedModel can be maliciously altered to cause a TensorFlow process to crash due to encountering a StatusOr value that is an error and forcibly extracting the value from it:cc
if (op reg data->type ctor != nullptr) {
VLOG(3) << "AddNode: found type constructor for " << node def.name();
const auto ctor type =
full type::SpecializeType(AttrSlice(node def), op reg data->op def);
const FullTypeDef ctor typedef = ctor type.ValueOrDie();
if (ctor typedef.type id() != TFT UNSET) {
*(node def.mutable experimental type()) = ctor typedef;
}
}If
ctor type is an error status, ValueOrDie results in a crash.Patches
We have patched the issue in GitHub commit 955059813cc325dc1db5e2daa6221271406d4439.
We have patched the issue in multiple GitHub commits and these will be included in TensorFlow 2.8.0 and TensorFlow 2.7.1, as both are affected.
For more information
Please consult our security guide for more information regarding the security model and how to contact us with issues and questions.
Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Tensorflow