CVE-2022-29202

PoC —

CVSS 3.1

5.5 medium

EPSS

<1%p25

Published

May 20, 2022 (May 20, 2022)

Modified

Jun 17, 2026

Description

TensorFlow is an open source platform for machine learning. Prior to versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4, the implementation of `tf.ragged.constant` does not fully validate the input arguments. This results in a denial of service by consuming all available memory. Versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4 contain a patch for this issue.

Vendors: google
Products: tensorflow
Weakness: CWE-20, CWE-400, CWE-1284
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

NVD CVE.org GitHub PoCs EPSS (0.3%)

In the news0 stories

No ingested article mentions this CVE yet.