CVE-2022-41886

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2022-41886

Import Source

https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-41886.json

JSON Data

https://api.test.osv.dev/v1/vulns/CVE-2022-41886

Aliases

Downstream

AZL-11526

Published

2022-11-18T00:00:00Z

Modified

2026-04-28T03:47:33.438464Z

Severity

4.8 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H CVSS Calculator

Summary

Overflow in `ImageProjectiveTransformV2` in Tensorflow

Details

TensorFlow is an open source platform for machine learning. When tf.raw_ops.ImageProjectiveTransformV2 is given a large output shape, it overflows. We have patched the issue in GitHub commit 8faa6ea692985dbe6ce10e1a3168e0bd60a723ba. The fix will be included in TensorFlow 2.11. We will also cherrypick this commit on TensorFlow 2.10.1, 2.9.3, and TensorFlow 2.8.4, as these are also affected and still in supported range.

Database specific

{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/41xxx/CVE-2022-41886.json",
    "cwe_ids": [
        "CWE-131"
    ],
    "cna_assigner": "GitHub_M"
}

References

Affected packages

Git / github.com/tensorflow/tensorflow

Affected ranges

Type: GIT
Repo: https://github.com/tensorflow/tensorflow
Events: Introduced

8a20d54a3c1bfa38c03ea99a2ad3c1b0a45dfa95

Fixed

1b8f5c396f0c016ebe81fe1af029e6f205c926a4

Database specific

source

"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-41886.json"