Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-41853 State: PUBLISHED Published: 2022-10-06T17:14:43.225Z Last Updated: 2025-04-21T13:48:46.363Z Severity: HIGH (CVSS 8 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H) Vendors: HyperSQL DataBase Products: hsqldb Problem Types: CWE-470 Description: Those using java.sql.Statement or java.sql.PreparedStatement in hsqldb (HyperSQL DataBase) to process untrusted input may be vulnerable to a remote code execution attack. By default it is allowed to call any static method of any Java class in the classpath resulting in code execution. The issue can be prevented by updating to 2.7.1 or by setting the system property "hsqldb.method_class_names" to classes which are allowed to be calle
updating to 2.7.1 or by setting the system property "hsqldb.method_class_names" to classes which are allowed to be called. For example, System.setProperty("hsqldb.method_class_names", "abc") or Java argument -Dhsqldb.method_class_names="abc" can be used. From version 2.7.1 all classes by default are not accessible except those in java.lang.Math and need to be manually enabled. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50212#c7 - http://hsqldb.org/doc/2.0/guide/sqlroutines-chapt.html#src_jrt_access_control - https://lists.debian.org/debian-lts-announce/2022/12/msg00020.html - https://www.debi
hapt.html#src_jrt_access_control - https://lists.debian.org/debian-lts-announce/2022/12/msg00020.html - https://www.debian.org/security/2023/dsa-5313
CVE ID: CVE-2022-41854 State: PUBLISHED Published: 2022-11-11T13:10:10.912038Z Last Updated: 2024-09-16T16:24:11.627Z Severity: MEDIUM (CVSS 5.8 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:N/I:N/A:H) Vendors: SnakeYaml Products: SnakeYaml Problem Types: CWE-121 Description: Those using Snakeyaml to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stack overflow. This effect may support a denial of service attack. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50355 - https://lists.fedo
- CVE Program Container: References: - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50355 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7MKE4XWRXTH32757H7QJU4ACS67DYDCR/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KSPAJ5Y45A4ZDION2KN5RDWLHK4XKY2J/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3DDXEXXWAZGF5AVHIPGFPXIWL6TSMKJE/ - https://security.netapp.com/advisory/ntap-20240315-0009/ - https://security.netapp.com/advisory/ntap-20240621-0006/
CVE ID: CVE-2022-41855 State: REJECTED Published: N/A Last Updated: 2022-12-30T00:00:00 Description: No description available.
CVE ID: CVE-2022-41856 State: REJECTED Published: N/A Last Updated: 2022-12-30T00:00:00 Description: No description available.
CVE ID: CVE-2022-41857 State: REJECTED Published: N/A Last Updated: 2022-12-30T00:00:00 Description: No description available.
CVE ID: CVE-2022-41858 State: PUBLISHED Published: 2023-01-17T00:00:00.000Z Last Updated: 2025-04-07T16:46:38.678Z Vendors: n/a Products: Linux kernel Problem Types: CWE-416 Description: A flaw was found in the Linux kernel. A NULL pointer dereference may occur while a slip driver is in progress to detach in sl_tx_timeout in drivers/net/slip/slip.c. This issue could allow an attacker to crash the system or leak internal kernel information. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/torvalds/linux/commit/ec4eb8a86ade4d22633e1da2a7d85a846b7d1798 - https://security.netapp.com/advisory/ntap-20230223-0006/
CVE ID: CVE-2022-41859 State: PUBLISHED Published: 2023-01-17T00:00:00.000Z Last Updated: 2025-11-03T19:27:37.502Z Vendors: n/a Products: freeradius Problem Types: CWE-200 Description: In freeradius, the EAP-PWD function compute_password_element() leaks information about the password which allows an attacker to substantially reduce the size of an offline dictionary attack. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://freeradius.org/security/ - https://github.com/FreeRADIUS/freeradius-server/commit/9e5e8f2f
CVE ID: CVE-2022-41860 State: PUBLISHED Published: 2023-01-17T00:00:00.000Z Last Updated: 2025-11-03T19:27:38.875Z Vendors: n/a Products: freeradius Problem Types: CWE-476 Description: In freeradius, when an EAP-SIM supplicant sends an unknown SIM option, the server will try to look that option up in the internal dictionaries. This lookup will fail, but the SIM code will not check for that failure. Instead, it will dereference a NULL pointer, and cause the server to crash. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://freeradius.org/security/ - https://github.com/FreeRADIUS/freeradius-server/commit/f1cdbb33ec61c4a64a
CVE ID: CVE-2022-41861 State: PUBLISHED Published: 2023-01-17T00:00:00.000Z Last Updated: 2025-11-03T19:27:40.244Z Vendors: n/a Products: freeradius Problem Types: CWE-400 Description: A flaw was found in freeradius. A malicious RADIUS client or home server can send a malformed abinary attribute which can cause the server to crash. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://freeradius.org/security/ - https://github.com/FreeRADIUS/freeradius-server/commit/0ec2b39d260e
CVE ID: CVE-2022-41862 State: PUBLISHED Published: 2023-03-03T00:00:00.000Z Last Updated: 2025-03-07T16:03:01.364Z Vendors: n/a Products: postgresql Problem Types: CWE-200 Description: In PostgreSQL, a modified, unauthenticated server can send an unterminated string during the establishment of Kerberos transport encryption. In certain conditions a server can cause a libpq client to over-read and report an error message containing uninitialized bytes. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.postgresql.org/support/security/CVE-2022-41862/ - https://bugzilla.redhat.com/show_bug.cgi?id=2165722 - https://security.netapp.com/advisory/nt
security/CVE-2022-41862/ - https://bugzilla.redhat.com/show_bug.cgi?id=2165722 - https://security.netapp.com/advisory/ntap-20230427-0002/
CVE ID: CVE-2022-41870 State: PUBLISHED Published: 2022-09-30T16:24:04.000Z Last Updated: 2025-05-20T18:29:01.827Z Vendors: n/a Products: n/a Problem Types: n/a Description: AP Manager in Innovaphone before 13r2 Service Release 17 allows command injection via a modified service ID during app upload. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://wiki.innovaphone.com/index.php?title=Reference13r2:Release_Notes_Security
CVE ID: CVE-2022-41871 State: PUBLISHED Published: 2025-04-28T00:00:00.000Z Last Updated: 2025-04-28T15:56:47.887Z Severity: MEDIUM (CVSS 6 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L) Vendors: SEPPmail Products: SEPPmail Problem Types: CWE-78 Description: SEPPmail through 12.1.17 allows command injection within the Admin Portal. An authenticated attacker is able to execute arbitrary code in the context of the user root. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.seppmail.com/products/ - https://code-white.com/public-vulnerability-list/
CVE ID: CVE-2022-41873 State: PUBLISHED Published: 2022-11-11T00:00:00.000Z Last Updated: 2025-04-23T16:38:15.769Z Severity: MEDIUM (CVSS 4.2 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N) Vendors: contiki-ng Products: contiki-ng Problem Types: CWE-125, CWE-787 Description: Contiki-NG is an open-source, cross-platform operating system for Next-Generation IoT devices. Versions prior to 4.9 are vulnerable to an Out-of-bounds read. While processing the L2CAP protocol, the Bluetooth Low Energy stack of Contiki-NG needs to map an incoming channel ID to its metadata structure. While looking up the corresponding channel structure in get_channel_for_cid (in os/net/mac/ble/ble-l2cap.c), a bounds check
le looking up the corresponding channel structure in get_channel_for_cid (in os/net/mac/ble/ble-l2cap.c), a bounds check is performed on the incoming channel ID, which is meant to ensure that the channel ID does not exceed the maximum number of supported channels.However, an integer truncation issue leads to only the lowest byte of the channel ID to be checked, which leads to an incomplete out-of-bounds check. A crafted channel ID leads to out-of-bounds memory to be read and written with attacker-controlled data. The vulnerability has been patched in the "develop" branch of Contiki-NG, and will be included in release 4.9. As a workaround, Users can apply the patch in Contiki-NG pull request
Contiki-NG, and will be included in release 4.9. As a workaround, Users can apply the patch in Contiki-NG pull request 2081 on GitHub. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/contiki-ng/contiki-ng/security/advisories/GHSA-m5cj-fw8m-ffgf - https://github.com/contiki-ng/contiki-ng/pull/2081
CVE ID: CVE-2022-41874 State: PUBLISHED Published: 2022-11-10T00:00:00.000Z Last Updated: 2025-04-23T16:38:40.535Z Severity: LOW (CVSS 2.6 CVSS:3.1/AV:A/AC:H/PR:L/UI:R/S:C/C:L/I:N/A:N) Vendors: tauri-apps Products: tauri Problem Types: CWE-668, CWE-706 Description: Tauri is a framework for building binaries for all major desktop platforms. In versions prior to 1.0.7 and 1.1.2, Tauri is vulnerable to an Incorrectly-Resolved Name. Due to incorrect escaping of special characters in paths selected via the file dialog and drag and drop functionality, it is possible to partially bypass the `fs` scope definition. It is not possible to traverse into arbitrary paths, as the issue is limited to neighb
bypass the `fs` scope definition. It is not possible to traverse into arbitrary paths, as the issue is limited to neighboring files and sub folders of already allowed paths. The impact differs on Windows, MacOS and Linux due to different specifications of valid path characters. This bypass depends on the file picker dialog or dragged files, as user selected paths are automatically added to the allow list at runtime. A successful bypass requires the user to select a pre-existing malicious file or directory during the file picker dialog and an adversary controlled logic to access these files. The issue has been patched in versions 1.0.7, 1.1.2 and 1.2.0. As a workaround, disable the dialog and
cess these files. The issue has been patched in versions 1.0.7, 1.1.2 and 1.2.0. As a workaround, disable the dialog and fileDropEnabled component inside the tauri.conf.json. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/tauri-apps/tauri/security/advisories/GHSA-q9wv-22m9-vhqh
CVE ID: CVE-2022-41875 State: PUBLISHED Published: 2022-11-23T00:00:00.000Z Last Updated: 2025-04-23T16:35:48.578Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: airbnb Products: optica Problem Types: CWE-502 Description: A remote code execution (RCE) vulnerability in Optica allows unauthenticated attackers to execute arbitrary code via specially crafted JSON payloads. Specially crafted JSON payloads may lead to RCE (remote code execution) on the attacked system running Optica. The vulnerability was patched in v. 0.10.2, where the call to the function `oj.load` was changed to `oj.safe_load`. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vul
the function `oj.load` was changed to `oj.safe_load`. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/airbnb/optica/security/advisories/GHSA-cf87-4h6x-phh6 - https://github.com/ohler55/oj/blob/develop/pages/Security.md - https://www.rubydoc.info/gems/oj/3.0.2/Oj.safe_load
CVE ID: CVE-2022-41876 State: PUBLISHED Published: 2022-11-10T00:00:00.000Z Last Updated: 2025-04-23T16:38:34.331Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: ezsystems Products: ezplatform-graphql Problem Types: CWE-200, CWE-922 Description: ezplatform-graphql is a GraphQL server implementation for Ibexa DXP and Ibexa Open Source. Versions prior to 2.3.12 and 1.0.13 are subject to Insecure Storage of Sensitive Information. Unauthenticated GraphQL queries for user accounts can expose password hashes of users that have created or modified content, typically administrators and editors. This issue has been patched in versions 2.3.12, and 1.0.13 on the 1.X bra
content, typically administrators and editors. This issue has been patched in versions 2.3.12, and 1.0.13 on the 1.X branch. Users unable to upgrade can remove the "passwordHash" entry from "src/bundle/Resources/config/graphql/User.types.yaml" in the GraphQL package, and other properties like hash type, email, login if you prefer. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/ezsystems/ezplatform-graphql/security/advisories/GHSA-c7pc-pgf6-mfh5
CVE ID: CVE-2022-41877 State: PUBLISHED Published: 2022-11-16T00:00:00.000Z Last Updated: 2025-11-03T20:35:08.499Z Severity: MEDIUM (CVSS 4.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L) Vendors: FreeRDP Products: FreeRDP Problem Types: CWE-119 Description: FreeRDP is a free remote desktop protocol library and clients. Affected versions of FreeRDP are missing input length validation in `drive` channel. A malicious server can trick a FreeRDP based client to read out of bound data and send it back to the server. This issue has been addressed in version 2.9.0 and all users are advised to upgrade. Users unable to upgrade should not use the drive redirection channel - command line options `/driv
e advised to upgrade. Users unable to upgrade should not use the drive redirection channel - command line options `/drive`, `+drives` or `+home-drive`. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-pmv3-wpw4-pw5h - https://github.com/FreeRDP/FreeRDP/commit/6655841cf2a00b764f855040aecb8803cfc5eaba - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UDOTAOJBCZKREZJPT6VZ25GESI5T6RBG/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YGQN3OWQNHSMWKOF4D35PF5ASKNLC74B/ - https://lists.debian.org/debia
st/package-announce%40lists.fedoraproject.org/message/YGQN3OWQNHSMWKOF4D35PF5ASKNLC74B/ - https://lists.debian.org/debian-lts-announce/2023/11/msg00010.html - https://security.gentoo.org/glsa/202401-16
CVE ID: CVE-2022-41878 State: PUBLISHED Published: 2022-11-10T00:00:00.000Z Last Updated: 2025-04-23T16:38:28.465Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: parse-community Products: parse-server Problem Types: CWE-74, CWE-1321 Description: Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. In versions prior to 5.3.2 or 4.10.19, keywords that are specified in the Parse Server option `requestKeywordDenylist` can be injected via Cloud Code Webhooks or Triggers. This will result in the keyword being saved to the database, bypassing the `requestKeywordDenylist` option. This issue is fixed in versions 4.10.
eyword being saved to the database, bypassing the `requestKeywordDenylist` option. This issue is fixed in versions 4.10.19, and 5.3.2. If upgrade is not possible, the following Workarounds may be applied: Configure your firewall to only allow trusted servers to make request to the Parse Server Cloud Code Webhooks API, or block the API completely if you are not using the feature. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/parse-community/parse-server/security/advisories/GHSA-xprv-wvh7-qqqx
CVE ID: CVE-2022-41879 State: PUBLISHED Published: 2022-11-10T00:00:00.000Z Last Updated: 2025-04-23T16:38:21.463Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: parse-community Products: parse-server Problem Types: CWE-1321 Description: Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. In versions prior to 5.3.3 or 4.10.20, a compromised Parse Server Cloud Code Webhook target endpoint allows an attacker to use prototype pollution to bypass the Parse Server `requestKeywordDenylist` option. This issue has been patched in versions 5.3.3 and 4.10.20. There are no known workarounds. Additional Analyst Notes: -
. This issue has been patched in versions 5.3.3 and 4.10.20. There are no known workarounds. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/parse-community/parse-server/security/advisories/GHSA-93vw-8fm5-p2jf
CVE ID: CVE-2022-41880 State: PUBLISHED Published: 2022-11-18T00:00:00.000Z Last Updated: 2025-04-22T16:07:13.537Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:H) Vendors: tensorflow Products: tensorflow Problem Types: CWE-125 Description: TensorFlow is an open source platform for machine learning. When the `BaseCandidateSamplerOp` function receives a value in `true_classes` larger than `range_max`, a heap oob read occurs. We have patched the issue in GitHub commit b389f5c944cadfdfe599b3f1e4026e036f30d2d4. The fix will be included in TensorFlow 2.11. We will also cherrypick this commit on TensorFlow 2.10.1, 2.9.3, and TensorFlow 2.8.4, as these are also affected and
. We will also cherrypick this commit on TensorFlow 2.10.1, 2.9.3, and TensorFlow 2.8.4, as these are also affected and still in supported range. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/tensorflow/tensorflow/security/advisories/GHSA-8w5g-3wcv-9g2j - https://github.com/tensorflow/tensorflow/commit/b389f5c944cadfdfe599b3f1e4026e036f30d2d4 - https://github.com/tensorflow/tensorflow/blob/master/tensorflow/core/kernels/candidate_sampler_ops.cc
CVE ID: CVE-2022-41881 State: PUBLISHED Published: 2022-12-12T00:00:00.000Z Last Updated: 2025-04-22T15:57:46.309Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: netty Products: netty Problem Types: CWE-674 Description: Netty project is an event-driven asynchronous network application framework. In versions prior to 4.1.86.Final, a StackOverflowError can be raised when parsing a malformed crafted message due to an infinite recursion. This issue is patched in version 4.1.86.Final. There is no workaround, except using a custom HaProxyMessageDecoder. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/ne
Decoder. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/netty/netty/security/advisories/GHSA-fx2c-96vj-985v - https://lists.debian.org/debian-lts-announce/2023/01/msg00008.html - https://www.debian.org/security/2023/dsa-5316 - https://security.netapp.com/advisory/ntap-20230113-0004/
CVE ID: CVE-2022-41882 State: PUBLISHED Published: 2022-11-11T00:00:00.000Z Last Updated: 2025-04-23T16:38:10.200Z Severity: MEDIUM (CVSS 6.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:H/A:L) Vendors: nextcloud Products: security-advisories Problem Types: CWE-94 Description: The Nextcloud Desktop Client is a tool to synchronize files from Nextcloud Server with your computer. In version 3.6.0, if a user received a malicious file share and has it synced locally or the virtual filesystem enabled and clicked a nc://open/ link it will open the default editor for the file type of the shared file, which on Windows can also sometimes mean that a file depending on the type, e.g. "vbs", is being executed.
shared file, which on Windows can also sometimes mean that a file depending on the type, e.g. "vbs", is being executed. It is recommended that the Nextcloud Desktop client is upgraded to version 3.6.1. As a workaround, users can block the Nextcloud Desktop client 3.6.0 by setting the `minimum.supported.desktop.version` system config to `3.6.1` on the server, so new files designed to use this attack vector are not downloaded anymore. Already existing files can still be used. Another workaround would be to enforce shares to be accepted by setting the `sharing.force_share_accept` system config to `true` on the server, so new files designed to use this attack vector are not downloaded anymore.
ept` system config to `true` on the server, so new files designed to use this attack vector are not downloaded anymore. Already existing shares can still be abused. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/nextcloud/security-advisories/security/advisories/GHSA-3w86-rm38-8w63 - https://github.com/nextcloud/desktop/pull/5039 - https://github.com/nextcloud/server/pull/34559 - https://github.com/nextcloud/desktop/releases/tag/v3.6.1
CVE ID: CVE-2022-41883 State: PUBLISHED Published: 2022-11-18T00:00:00.000Z Last Updated: 2025-04-22T16:07:05.864Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:H) Vendors: tensorflow Products: tensorflow Problem Types: CWE-125 Description: TensorFlow is an open source platform for machine learning. When ops that have specified input sizes receive a differing number of inputs, the executor will crash. We have patched the issue in GitHub commit f5381e0e10b5a61344109c1b7c174c68110f7629. The fix will be included in TensorFlow 2.11. We will also cherrypick this commit on TensorFlow 2.10.1, 2.9.3, and TensorFlow 2.8.4, as these are also affected and still in supported rang
ck this commit on TensorFlow 2.10.1, 2.9.3, and TensorFlow 2.8.4, as these are also affected and still in supported range. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/tensorflow/tensorflow/security/advisories/GHSA-w58w-79xv-6vcj - https://github.com/tensorflow/tensorflow/commit/f5381e0e10b5a61344109c1b7c174c68110f7629 - https://github.com/tensorflow/tensorflow/blob/master/tensorflow/core/kernels/dynamic_stitch_op.cc - https://github.com/tensorflow/tensorflow/blob/master/tensorflow/core/ops/data_flow_ops.cc
CVE ID: CVE-2022-41884 State: PUBLISHED Published: 2022-11-18T00:00:00.000Z Last Updated: 2025-04-22T16:06:54.684Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H) Vendors: tensorflow Products: tensorflow Problem Types: CWE-670 Description: TensorFlow is an open source platform for machine learning. If a numpy array is created with a shape such that one element is zero and the others sum to a large number, an error will be raised. We have patched the issue in GitHub commit 2b56169c16e375c521a3bc8ea658811cc0793784. The fix will be included in TensorFlow 2.11. We will also cherrypick this commit on TensorFlow 2.10.1, 2.9.3, and TensorFlow 2.8.4, as these are also affect
ow 2.11. We will also cherrypick this commit on TensorFlow 2.10.1, 2.9.3, and TensorFlow 2.8.4, as these are also affected and still in supported range. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/tensorflow/tensorflow/security/advisories/GHSA-jq6x-99hj-q636 - https://github.com/tensorflow/tensorflow/commit/2b56169c16e375c521a3bc8ea658811cc0793784
CVE ID: CVE-2022-41885 State: PUBLISHED Published: 2022-11-18T00:00:00.000Z Last Updated: 2025-04-22T16:06:46.870Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H) Vendors: tensorflow Products: tensorflow Problem Types: CWE-131 Description: TensorFlow is an open source platform for machine learning. When `tf.raw_ops.FusedResizeAndPadConv2D` is given a large tensor shape, it overflows. We have patched the issue in GitHub commit d66e1d568275e6a2947de97dca7a102a211e01ce. The fix will be included in TensorFlow 2.11. We will also cherrypick this commit on TensorFlow 2.10.1, 2.9.3, and TensorFlow 2.8.4, as these are also affected and still in supported range. Additional Ana