{"id":"CVE-2022-35973","summary":"Segfault in `QuantizedMatMul` in TensorFlow","details":"TensorFlow is an open source platform for machine learning. If `QuantizedMatMul` is given nonscalar input for: `min_a`, `max_a`, `min_b`, or `max_b` It gives a segfault that can be used to trigger a denial of service attack. We have patched the issue in GitHub commit aca766ac7693bf29ed0df55ad6bfcc78f35e7f48. The fix will be included in TensorFlow 2.10.0. We will also cherrypick this commit on TensorFlow 2.9.1, TensorFlow 2.8.1, and TensorFlow 2.7.2, as these are also affected and still in supported range. There are no known workarounds for this issue.","aliases":["BIT-tensorflow-2022-35973","GHSA-689c-r7h2-fv9v","PYSEC-2026-3119","PYSEC-2026-3285","PYSEC-2026-959"],"modified":"2026-08-12T13:01:20.627832Z","published":"2022-09-16T21:00:14Z","related":["openSUSE-SU-2024:12355-1"],"database_specific":{"cna_assigner":"GitHub_M","cwe_ids":["CWE-20"],"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/35xxx/CVE-2022-35973.json"},"references":[{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/35xxx/CVE-2022-35973.json"},{"type":"ADVISORY","url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-689c-r7h2-fv9v"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-35973"},{"type":"FIX","url":"https://github.com/tensorflow/tensorflow/commit/aca766ac7693bf29ed0df55ad6bfcc78f35e7f48"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/tensorflow/tensorflow","events":[{"introduced":"c256c071bb26e1e13b4666d1b3e229e110bc914a"},{"fixed":"dd7b8a3c1714d0052ce4b4a2fd8dcef927439a24"},{"introduced":"3f878cff5b698b82eea85db2b60d65a2e320850e"},{"fixed":"0516d4d8bced506cae97dc3cb45dbd2fe4311f26"},{"introduced":"8a20d54a3c1bfa38c03ea99a2ad3c1b0a45dfa95"},{"fixed":"d8ce9f9c301d021a69953134185ab728c1c248d3"},{"fixed":"aca766ac7693bf29ed0df55ad6bfcc78f35e7f48"}],"database_specific":{"cpe":"cpe:2.3:a:google:tensorflow:*:*:*:*:*:*:*:*","extracted_events":[{"introduced":"2.7.0"},{"fixed":"2.7.2"},{"introduced":"2.8.0"},{"fixed":"2.8.1"},{"introduced":"2.9.0"},{"fixed":"2.9.1"}],"source":["CPE_RANGE","REFERENCES"]}}],"versions":["v2.9.0","v2.7.1","v2.8.0","v2.7.0"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-35973.json","vanir_signatures_modified":"2026-08-12T13:01:20Z","vanir_signatures":[{"digest":{"function_hash":"205818949409898297279305957061640604285","length":1292},"id":"CVE-2022-35973-0b77fd7d","signature_type":"Function","signature_version":"v1","source":"https://github.com/tensorflow/tensorflow/commit/aca766ac7693bf29ed0df55ad6bfcc78f35e7f48","target":{"file":"tensorflow/core/kernels/quantized_matmul_op_test.cc","function":"TEST_F"},"deprecated":false},{"deprecated":false,"digest":{"length":4203,"function_hash":"143545846867930819743094826276989264349"},"id":"CVE-2022-35973-56ae07d9","signature_type":"Function","signature_version":"v1","source":"https://github.com/tensorflow/tensorflow/commit/aca766ac7693bf29ed0df55ad6bfcc78f35e7f48","target":{"file":"tensorflow/core/kernels/quantized_matmul_op_test.cc","function":"TEST_F"}},{"signature_version":"v1","source":"https://github.com/tensorflow/tensorflow/commit/aca766ac7693bf29ed0df55ad6bfcc78f35e7f48","target":{"file":"tensorflow/core/kernels/quantized_matmul_op_test.cc"},"deprecated":false,"digest":{"line_hashes":["249657895475343570159719882418894698018","105420967582495539902252418731283963385","24980641303819689215141173018187767490","114981062074063230992394029044143918314","50533667815199908839388385633968739847","198142359596172620740278370848507650393","5480419281250272816530343460929044946","33762058812074242216776820069444197638","176716573649525894601668206471650851554","89623331791935849585457691779515033185","151067271963239057450236505262654691450","261415808009275306874559890359421228126","67966027589804430926408754387932836866","143444450381117149364247135138191861992","33762058812074242216776820069444197638","176716573649525894601668206471650851554","89623331791935849585457691779515033185","123693085517118727689816764509431474890","89120527918108150309744914726716258429","185038679976984870842757828692734761656","218167264557819332724696158261064250675","64343780259942908067559979506288173433","177231956240504764601249331586232704418","78752409198847332514221910034638371629","263792738617173006636528754579178036409","197307921001982820700833740770800600787","277634249821700463821418916753920187188","78647198990529997548380864355722536621","219767597316407169510947509542571204297","238738775615921151256265093025963628604","39207933524147451455339615633027592428","45894915504333316621634039760721462803","12126225976664331065537403277973429837","253719156431353511848320616915418631181","14107319736291256576777380585193920923"],"threshold":0.9},"id":"CVE-2022-35973-65828675","signature_type":"Line"},{"signature_version":"v1","source":"https://github.com/tensorflow/tensorflow/commit/aca766ac7693bf29ed0df55ad6bfcc78f35e7f48","target":{"function":"TEST_F","file":"tensorflow/core/kernels/quantized_matmul_op_test.cc"},"deprecated":false,"digest":{"function_hash":"339103731068629875583939164824281761050","length":1180},"id":"CVE-2022-35973-a1f1013c","signature_type":"Function"},{"deprecated":false,"digest":{"function_hash":"159966106327812405337989371595337063058","length":1142},"id":"CVE-2022-35973-b1c3da00","signature_type":"Function","signature_version":"v1","source":"https://github.com/tensorflow/tensorflow/commit/aca766ac7693bf29ed0df55ad6bfcc78f35e7f48","target":{"function":"TEST_F","file":"tensorflow/core/kernels/quantized_matmul_op_test.cc"}},{"source":"https://github.com/tensorflow/tensorflow/commit/aca766ac7693bf29ed0df55ad6bfcc78f35e7f48","target":{"file":"tensorflow/core/kernels/quantized_matmul_op_test.cc","function":"TEST_F"},"deprecated":false,"digest":{"function_hash":"17358590983949819086701964697384341107","length":1412},"id":"CVE-2022-35973-cc6f28f6","signature_type":"Function","signature_version":"v1"},{"digest":{"line_hashes":["193946883810683532381872802295725154172","268724565794205995253310988339992580446","304084133814380787019646882866335705973","61423412841982600026255808326272231029","215703351722366371360018399767145964458","226755047833939050266126151100950165297","252581401575650196326559800782904556957","244478048213781140868317769285454091265","160306934395347315386110660151759634566","31883953846112743330600513848426795559","272303669441624492513021109006793239470","323956859897605499600474919306328149942","2779538300235377169382454823809479112","209098260949746564750133700910957911528"],"threshold":0.9},"id":"CVE-2022-35973-f02ea789","signature_type":"Line","signature_version":"v1","source":"https://github.com/tensorflow/tensorflow/commit/aca766ac7693bf29ed0df55ad6bfcc78f35e7f48","target":{"file":"tensorflow/core/kernels/quantized_matmul_op.cc"},"deprecated":false}]}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H"}]}