{"data":{"id":"92fd6712-bae7-4605-93b8-fb474762d0ae","title":"CVE-2022-41883: TensorFlow is an open source platform for machine learning. When ops that have specified input sizes receive a…","summary":"CVE-2022-41883 affects TensorFlow, an open source machine learning platform. When ops with specified input sizes receive a differing number of inputs, the executor crashes. The issue is patched in GitHub commit f5381e0e10b5a61344109c1b7c174c68110f7629.","solution":"Fixed in GitHub commit f5381e0e10b5a61344109c1b7c174c68110f7629, which will be included in TensorFlow 2.11. The commit will also be cherry-picked to TensorFlow 2.10.1, 2.9.3, and 2.8.4.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2022-41883","publishedAt":"2022-11-19T02:15:10.923Z","cveId":"CVE-2022-41883","cweIds":["CWE-125"],"cvssScore":"6.8","cvssSeverity":"medium","severity":"medium","attackType":["denial_of_service"],"issueType":"vulnerability","affectedPackages":["tensorflow@= 2.10.0 (fixed: 2.10.1)","tensorflow-cpu@= 2.10.0 (fixed: 2.10.1)","tensorflow-gpu@= 2.10.0 (fixed: 2.10.1)"],"affectedPackageNames":["tensorflow","tensorflow-cpu","tensorflow-gpu"],"affectedPackageRefs":["pypi:tensorflow","pypi:tensorflow-cpu","pypi:tensorflow-gpu"],"affectedVendors":["Google"],"affectedVendorsRaw":["TensorFlow"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"TensorFlow crash in ops with specified input sizes when input count differs","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00384,"epssCheckedAt":"2026-11-04T12:08:34.339Z","kevDateAdded":null,"advisoryAliases":["GHSA-w58w-79xv-6vcj"],"affectedPackagesSource":"ghsa","affectedPackagesCheckedAt":"2026-10-10T03:57:34.495Z","patchAvailable":true,"disclosureDate":null,"fixReleasedAt":"2022-11-16T20:03:56.467Z","daysToFix":-3,"fixCheckedAt":"2026-10-29T21:47:47.524Z","capecIds":["CAPEC-540"],"crossRefCount":0,"attackSophistication":"trivial","impactType":["availability"],"aiComponentTargeted":"framework","llmSpecific":false,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":null,"fixes":[{"ecosystem":"pypi","name":"tensorflow","fixedVersion":"2.10.1","matchedVersion":"2.10.1","fixReleasedAt":"2022-11-16T20:03:56.467Z","daysToFix":-3,"match":"ecosystem","source":"tracked","status":"found","checkedAt":"2026-10-29T21:47:47.373Z"},{"ecosystem":"pypi","name":"tensorflow-cpu","fixedVersion":"2.10.1","matchedVersion":"2.10.1","fixReleasedAt":"2022-11-16T20:05:33.350Z","daysToFix":-3,"match":"ecosystem","source":"registry","status":"found","checkedAt":"2026-10-29T21:47:47.373Z"},{"ecosystem":"pypi","name":"tensorflow-gpu","fixedVersion":"2.10.1","matchedVersion":"2.10.1","fixReleasedAt":"2022-11-16T20:10:45.110Z","daysToFix":-3,"match":"ecosystem","source":"registry","status":"found","checkedAt":"2026-10-29T21:47:47.373Z"}]}}