CVE-2022-29199: Denial of Service Vulnerability in TensorFlow
Summary
CVE-2022-29199: Missing validation causes denial of service via LoadAndRemapMatrix. Affects tensorflow across 3 version ranges.
< 2.6.4
>= 2.7.0, < 2.7.2
>= 2.8.0, < 2.8.1
Fixed in 2.6.4, 2.7.2 or 2.8.1, depending on the release line you run. How to fix ↓
Also tracked for
- tensorflow-cpu · PyPI
- tensorflow-gpu · PyPI
- tensorflow · Bitnami
The same CVE-2022-29199 is tracked separately for each ecosystem and vendor. Its fix information is the same; the package and affected versions differ.
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
TensorFlow is an open-source machine learning framework developed by Google. It provides a comprehensive ecosystem of tools, libraries, and resources for building and deploying machine learning models. TensorFlow is widely used in various domains, including research, industry, and academia. However, a vulnerability has been discovered in TensorFlow that could lead to a denial of service attack.
Vulnerability Detail
The vulnerability, identified as CVE-2022-29199, is caused by missing validation in the LoadAndRemapMatrix function of TensorFlow. This function is responsible for loading and remapping matrices in TensorFlow models. The implementation of this function does not fully validate the input arguments, allowing an attacker to trigger a CHECK-failure and cause a denial of service attack. By exploiting this vulnerability, an attacker can disrupt the normal operation of TensorFlow, potentially leading to service unavailability or performance degradation.
How To Fix
Latest published version: 2.21.0 as of 22 Oct 2026
pip install --upgrade "tensorflow==2.21.0"Upgrading to it may include breaking changes; the versions below are the minimum fixed release for this vulnerability.
If you can't move to the latest
The minimum fixed version depends on the release line you run.
-
< 2.6.42.6.4pip install --upgrade "tensorflow==2.6.4" -
>= 2.7.0, < 2.7.22.7.2pip install --upgrade "tensorflow==2.7.2" -
>= 2.8.0, < 2.8.12.8.1pip install --upgrade "tensorflow==2.8.1"
Tip — Not sure which release line you're on? Vulert can find the fix for the version you are using. Scan free →
Workaround
There is no known workaround for this vulnerability. It is recommended to apply the official patch or update to a patched version of TensorFlow as soon as possible.
Conclusion
In conclusion, the CVE-2022-29199 vulnerability in TensorFlow can be exploited to trigger a denial of service attack. Users of affected versions should update their TensorFlow installation to one of the patched versions to mitigate the risk. If you have any further questions or need assistance with vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for tensorflow →
FAQ
This vulnerability can be exploited to trigger a denial of service attack, potentially leading to service unavailability or performance degradation.
You can use Vulert's playground (https://vulert.com/scanner) to check if your application is affected by this vulnerability. Vulert monitors and alerts in real-time for open-source vulnerabilities, using just the Pipfile.lock file.
There are no known instances of this vulnerability being exploited in the wild. However, it is recommended to apply the patch or update to a patched version to mitigate the risk.
Yes, this vulnerability can be exploited remotely by sending malicious input to the vulnerable function in TensorFlow.
For more information about this vulnerability, you can refer to the official security guide of TensorFlow (https://github.com/tensorflow/tensorflow/blob/master/SECURITY.md) or contact the TensorFlow development team.
References
Related vulnerabilities
Recent vulnerabilities recorded for tensorflow.
