CVE-2022-41911

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2022-41911

Import Source

https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-41911.json

JSON Data

https://api.test.osv.dev/v1/vulns/CVE-2022-41911

Aliases

Downstream

AZL-11544

Published

2022-11-18T00:00:00Z

Modified

2026-04-16T03:48:05.852555Z

Severity

4.8 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H CVSS Calculator

Summary

Invalid char to bool conversion when printing a tensor in Tensorflow

Details

TensorFlow is an open source platform for machine learning. When printing a tensor, we get it's data as a const char* array (since that's the underlying storage) and then we typecast it to the element type. However, conversions from char to bool are undefined if the char is not 0 or 1, so sanitizers/fuzzers will crash. The issue has been patched in GitHub commit 1be74370327. The fix will be included in TensorFlow 2.11.0. We will also cherrypick this commit on TensorFlow 2.10.1, TensorFlow 2.9.3, and TensorFlow 2.8.4, as these are also affected and still in supported range.

Database specific

{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/41xxx/CVE-2022-41911.json",
    "cwe_ids": [
        "CWE-704"
    ],
    "cna_assigner": "GitHub_M"
}

References

Affected packages

Git / github.com/tensorflow/tensorflow

Affected ranges

Type: GIT
Repo: https://github.com/tensorflow/tensorflow
Events: Introduced

8a20d54a3c1bfa38c03ea99a2ad3c1b0a45dfa95

Fixed

1b8f5c396f0c016ebe81fe1af029e6f205c926a4

Database specific

source

"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-41911.json"