{"id":"CVE-2022-29201","summary":"Missing validation in `QuantizedConv2D` results in undefined behavior in TensorFlow","details":"TensorFlow is an open source platform for machine learning. Prior to versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4, the implementation of `tf.raw_ops.QuantizedConv2D` does not fully validate the input arguments. In this case, references get bound to `nullptr` for each argument that is empty. Versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4 contain a patch for this issue.","aliases":["BIT-tensorflow-2022-29201","GHSA-pqhm-4wvf-2jg8","PYSEC-2026-1026","PYSEC-2026-3224","PYSEC-2026-3358"],"modified":"2026-08-12T13:00:56.450782Z","published":"2022-05-20T23:00:15Z","database_specific":{"cna_assigner":"GitHub_M","cwe_ids":["CWE-20","CWE-476"],"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/29xxx/CVE-2022-29201.json"},"references":[{"type":"WEB","url":"https://github.com/tensorflow/tensorflow/blob/f3b9bf4c3c0597563b289c0512e98d4ce81f886e/tensorflow/core/kernels/quantized_conv_ops.cc"},{"type":"WEB","url":"https://github.com/tensorflow/tensorflow/releases/tag/v2.6.4"},{"type":"WEB","url":"https://github.com/tensorflow/tensorflow/releases/tag/v2.7.2"},{"type":"WEB","url":"https://github.com/tensorflow/tensorflow/releases/tag/v2.8.1"},{"type":"WEB","url":"https://github.com/tensorflow/tensorflow/releases/tag/v2.9.0"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/29xxx/CVE-2022-29201.json"},{"type":"ADVISORY","url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-pqhm-4wvf-2jg8"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-29201"},{"type":"FIX","url":"https://github.com/tensorflow/tensorflow/commit/0f0b080ecde4d3dfec158d6f60da34d5e31693c4"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/tensorflow/tensorflow","events":[{"introduced":"0"},{"fixed":"33ed2b11cb8e879d86c371700e6573db1814a69e"},{"introduced":"c256c071bb26e1e13b4666d1b3e229e110bc914a"},{"fixed":"dd7b8a3c1714d0052ce4b4a2fd8dcef927439a24"},{"introduced":"ce35e5c3a8efdb8161c6a85c8fb9ffb5bbdc9ffd"},{"fixed":"0f0b080ecde4d3dfec158d6f60da34d5e31693c4"},{"fixed":"0516d4d8bced506cae97dc3cb45dbd2fe4311f26"},{"fixed":"8a20d54a3c1bfa38c03ea99a2ad3c1b0a45dfa95"}],"database_specific":{"cpe":["cpe:2.3:a:google:tensorflow:*:*:*:*:*:*:*:*","cpe:2.3:a:google:tensorflow:2.7.0:rc0:*:*:*:*:*:*","cpe:2.3:a:google:tensorflow:2.7.0:rc1:*:*:*:*:*:*","cpe:2.3:a:google:tensorflow:2.8.0:-:*:*:*:*:*:*","cpe:2.3:a:google:tensorflow:2.8.0:rc0:*:*:*:*:*:*","cpe:2.3:a:google:tensorflow:2.8.0:rc1:*:*:*:*:*:*","cpe:2.3:a:google:tensorflow:2.9.0:rc0:*:*:*:*:*:*","cpe:2.3:a:google:tensorflow:2.9.0:rc1:*:*:*:*:*:*"],"extracted_events":[{"introduced":"0"},{"fixed":"2.6.4"},{"introduced":"2.7.0"},{"fixed":"2.7.2"},{"introduced":"2.7.0-rc0"},{"last_affected":"2.7.0-rc0"},{"introduced":"2.7.0-rc1"},{"last_affected":"2.7.0-rc1"},{"introduced":"2.8.0-NA"},{"last_affected":"2.8.0-NA"},{"introduced":"2.8.0-rc0"},{"last_affected":"2.8.0-rc0"},{"introduced":"2.8.0-rc1"},{"last_affected":"2.8.0-rc1"},{"introduced":"2.9.0-rc0"},{"last_affected":"2.9.0-rc0"},{"introduced":"2.9.0-rc1"},{"last_affected":"2.9.0-rc1"}],"source":["CPE_RANGE","CPE_STRING","REFERENCES"]}}],"versions":["2.7.0-rc0","2.7.0-rc1","2.8.0-NA","2.8.0-rc0","2.8.0-rc1","2.9.0-rc0","2.9.0-rc1","v2.9.0-rc2","v2.9.0-rc1","v2.6.3","v2.7.1","v2.9.0-rc0","v2.8.0","v2.8.0-rc1","v2.6.2","v2.8.0-rc0","v2.7.0","v2.6.1","v2.6.0","v2.6.0-rc2","v2.6.0-rc1","v2.6.0-rc0","v1.12.1","v1.9.0-rc2","v1.6.0-rc1","v1.1.0-rc2","v1.1.0-rc1","0.6.0","0.5.0"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-29201.json","vanir_signatures_modified":"2026-08-12T13:00:56Z","vanir_signatures":[{"source":"https://github.com/tensorflow/tensorflow/commit/0f0b080ecde4d3dfec158d6f60da34d5e31693c4","target":{"function":"TEST_F","file":"tensorflow/core/kernels/quantized_conv_ops_test.cc"},"deprecated":false,"digest":{"length":1705,"function_hash":"169876322947976089489551384135146389691"},"id":"CVE-2022-29201-15e5981f","signature_type":"Function","signature_version":"v1"},{"digest":{"line_hashes":["222127464424197151312201508530572355375","334071559888152590303671518969569069212","303322664097994696350707705076678115994","61423412841982600026255808326272231029","12803966578727707693718103160251753128","26009922089557397114819885204638861534","169833022712220206946179210229954992585","166297090125927854202254850438197518963","266745669498482532529041100593662099803","196449550045563088823588211951274545458","49887445249216365808568830357617651480","238960558971486481657102953624929000728","67527139083513412173606849573818927966","60653666337444819877792196398075282985","306089263571182940769881042116993574999"],"threshold":0.9},"id":"CVE-2022-29201-3da4a517","signature_type":"Line","signature_version":"v1","source":"https://github.com/tensorflow/tensorflow/commit/0f0b080ecde4d3dfec158d6f60da34d5e31693c4","target":{"file":"tensorflow/core/kernels/quantized_conv_ops.cc"},"deprecated":false},{"digest":{"function_hash":"334546105872343221942130398738612174008","length":1571},"id":"CVE-2022-29201-737899b5","signature_type":"Function","signature_version":"v1","source":"https://github.com/tensorflow/tensorflow/commit/0f0b080ecde4d3dfec158d6f60da34d5e31693c4","target":{"file":"tensorflow/core/kernels/quantized_conv_ops_test.cc","function":"TEST_F"},"deprecated":false},{"signature_version":"v1","source":"https://github.com/tensorflow/tensorflow/commit/0f0b080ecde4d3dfec158d6f60da34d5e31693c4","target":{"file":"tensorflow/core/kernels/quantized_conv_ops_test.cc","function":"TEST_F"},"deprecated":false,"digest":{"function_hash":"228402949433050483132927117190500744694","length":2271},"id":"CVE-2022-29201-7d9d65e1","signature_type":"Function"},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/tensorflow/tensorflow/commit/0f0b080ecde4d3dfec158d6f60da34d5e31693c4","target":{"file":"tensorflow/core/kernels/quantized_conv_ops_test.cc","function":"TEST_F"},"deprecated":false,"digest":{"function_hash":"160498315446740084938018477911145023617","length":1515},"id":"CVE-2022-29201-cc59cefc"},{"source":"https://github.com/tensorflow/tensorflow/commit/0f0b080ecde4d3dfec158d6f60da34d5e31693c4","target":{"file":"tensorflow/core/kernels/quantized_conv_ops_test.cc"},"deprecated":false,"digest":{"line_hashes":["96102057876460340756226779263734911608","260894781741332688016660620914003383145","109305452863524769094266493699593454354","53873350927231335504726265587243618858","209481700081496145575083227306967568242","93410809845323035930536728146720775939","166965649408864252649373451883594788302","8787874801499126514889075172784323315","219140083370382327724085172135354997266","192872023628867772523033946557817606163","114981062074063230992394029044143918314","50533667815199908839388385633968739847","182968109486089702541765018081610329725","186054801188182943669412486827739604298","232550946738321337080989218819706504946","118655222761935353979913377724080259076","81596715103290379167193924796000237735","114981062074063230992394029044143918314","50533667815199908839388385633968739847","266443050688095839610705026918827544938","138539893050891084104936400065900402251","232550946738321337080989218819706504946","118655222761935353979913377724080259076","81596715103290379167193924796000237735","114981062074063230992394029044143918314","50533667815199908839388385633968739847","266443050688095839610705026918827544938","138539893050891084104936400065900402251","96102057876460340756226779263734911608","260894781741332688016660620914003383145","109305452863524769094266493699593454354","53873350927231335504726265587243618858","209481700081496145575083227306967568242","93410809845323035930536728146720775939","166965649408864252649373451883594788302"],"threshold":0.9},"id":"CVE-2022-29201-e1b76e5e","signature_type":"Line","signature_version":"v1"},{"target":{"file":"tensorflow/core/kernels/quantized_conv_ops_test.cc","function":"TEST_F"},"deprecated":false,"digest":{"length":2271,"function_hash":"38527116282901780815697184308357372367"},"id":"CVE-2022-29201-e459b689","signature_type":"Function","signature_version":"v1","source":"https://github.com/tensorflow/tensorflow/commit/0f0b080ecde4d3dfec158d6f60da34d5e31693c4"}]}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"}]}