PyPI: tensorflow-rocm
CVE-2022-35939
Safety vulnerability ID: SFTY-20220916-42025
Safety legacy ID: pyup.io-57593
Tensorflow-rocm 2.7.4, 2.8.3 and 2.9.2 include a fix for CVE-2022-35939: OOB write in 'scatter_nd' op in TF Lite. https://github.com/tensorflow/tensorflow/security/advisories/GHSA-ffjm-4qwc-7cmf
Overview
TensorFlow vulnerable to OOB write in `scatter_nd` in TF Lite
Advisory
Tensorflow-rocm 2.7.4, 2.8.3 and 2.9.2 include a fix for CVE-2022-35939: OOB write in 'scatter_nd' op in TF Lite. https://github.com/tensorflow/tensorflow/security/advisories/GHSA-ffjm-4qwc-7cmf
Affected Package
Also affects
---
How to Fix
Mitigation and Workarounds
---
Vulnerable Functions
Functions linked to known vulnerabilities.
References
- https://getsafety.com/vulnerabilities/SFTY-20220916-42025/CVE-2022-35939
- https://github.com/tensorflow/tensorflow/security/advisories/GHSA-ffjm-4qwc-7cmf
- https://github.com/tensorflow/tensorflow/commit/b4d4b4cb019bd7240a52daa4ba61e3cc814f0384
- https://github.com/tensorflow/tensorflow/blob/266558ac4c1f361e9a178ee9d3f0ce2e648ae499/tensorflow/lite/kernels/internal/reference/reference_ops.h#L659-L698
- https://github.com/tensorflow/tensorflow/releases/tag/v2.10.0
- https://nvd.nist.gov/vuln/detail/CVE-2022-35939
- https://github.com/advisories/GHSA-ffjm-4qwc-7cmf
Verified by Safety
Our Cybersecurity Intelligence Team reviewed this vulnerability. We combine public data with our own research to find issues not yet reported to public sources.
Learn more