CVE-2022-41887: TensorFlow crash from integer overflow in tf.keras.losses.poisson

Summary

CVE-2022-41887 affects TensorFlow's `tf.keras.losses.poisson`. When the `y_pred` and `y_true` inputs passed through `functor::mul` in `BinaryOp` produce dimensions that overflow an `int32`, TensorFlow crashes from a size mismatch during broadcast assignment.

Mitigation

Patched in GitHub commit c5b30379ba87cbe774b08ac50c1f6d36df4ebb7c. The fix ships in TensorFlow 2.11, and the commit will be cherry-picked to TensorFlow 2.10.1 and 2.9.3. It will not be cherry-picked to TensorFlow 2.8.x, because that line depends on Eigen behavior that changed between 2.8 and 2.9.

Affected packages in the Exposure Registry

Matched by package name and ecosystem. Each entry shows whether the package delegates to a language model and how many tracked packages depend on it.

• tensorflowPyPINo LLM dependency detected · 26 tracked dependents
• tensorflow-gpuPyPINo LLM dependency detected · 2 tracked dependents

Related items

• LowCloakFEM: Agentic FEM Code Generation for Red-Teaming Computational Resource ExhaustionSimilar attack · Arxiv (cs.CR + cs.CL + cs.LG)
• MediumThe Rise of LLMJacking: How Threat Actors Monetize Compromised Cloud and Model ResourcesSimilar attack · Google Threat Intelligence
• InfoThe Blind Spots of Detection: Adversarial Perturbation Attacks against Watchdogs in Distributed LLM InferenceSimilar attack · Arxiv (cs.CR + cs.CL + cs.LG)
• HighCVE-2026-118761: Kubeflow Pipelines decompression bomb in pipeline archive uploadSimilar attack · NVD/CVE Database
• LowOpenCode User Hit with Hostile Backlash After Reporting Free AI LoopholeSimilar attack · Socket Blog