`tf.raw_ops.Mfcc` crashes in Tensorflow

published 2022-11-18 3 y ago modified 2026-09-08 2 mo ago also BIT-tensorflow-2022-41896 , EUVD-2022-7428 , GHSA-rmg2-f698-wq35 , PYSEC-2026-1035 , PYSEC-2026-3239 , PYSEC-2026-3369

cvss: 4.8; version 3.1, CNA
cisa kev: Not listed; not in CISA's catalog
epss: 0.5%; EPSS 0.5% chance of exploitation in 30 days, percentile 42%
public exploits: 0; none known

TensorFlow is an open source platform for machine learning. If `ThreadUnsafeUnigramCandidateSampler` is given input `filterbank_channel_count` greater than the allowed max size, TensorFlow will crash. We have patched the issue in GitHub commit 39ec7eaf1428e90c37787e5b3fbd68ebd3c48860. The fix will be included in TensorFlow 2.11. We will also cherrypick this commit on TensorFlow 2.10.1, 2.9.3, and TensorFlow 2.8.4, as these are also affected and still in supported range.

Patch / fix

fixed in 5 distros 1 links 2

pypi tensorflow 2.8.4, 2.9.3, 2.10.1
pypi tensorflow-cpu 2.8.4, 2.9.3, 2.10.1
pypi tensorflow-gpu 2.8.4, 2.9.3, 2.10.1
bitnami tensorflow 2.8.4, 2.9.3, 2.10.1
google tensorflow 2.8.4, 2.9.3, 2.10.1

tensorflow CBL-Mariner 2.0 2.11.0-1

azure linux advisories AZL-11534

Azure Linux vulnerability data, Copyright (c) Microsoft Corporation, from https://github.com/microsoft/AzureLinuxVulnerabilityData via OSV, under the MIT licence; changed: normalised to fixed package versions per release. MIT

CISA SSVC

Exploitation: Proof of concept is public
Automatable: no
Technical impact: partial
Assessed: 18 mo ago (2025-04-22)

Exploit prediction

0.49% chance of exploitation in the next 30 days, higher than 42% of all scored CVEs (FIRST EPSS, 2026-11-08).

Exploits and checks

github.com https://github.com/tensorflow/tensorflow/security/advisories/GHSA-rmg2-f698-wq35 referenced PoC, tagged "exploit" by a source, unverified

CVSS scores

assigned by	version	score	vector
CNA	3.1	4.8	CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H
GitHub	3.1	4.8	CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H
NVD	3.1	7.5	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
OSV	3.1	7.5	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
OSV	3.1	4.8	CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H

Affected packages

ecosystem	package	affected	fixed in
pypi	tensorflow	<2.8.4 >=2.9.0, <2.9.3 >=2.10.0, <2.10.1	2.8.4 2.9.3 2.10.1
pypi	tensorflow-cpu	<2.8.4 >=2.9.0, <2.9.3 >=2.10.0, <2.10.1	2.8.4 2.9.3 2.10.1
pypi	tensorflow-gpu	<2.8.4 >=2.9.0, <2.9.3 >=2.10.0, <2.10.1	2.8.4 2.9.3 2.10.1
bitnami	tensorflow	<2.8.4 >=2.9.0, <2.9.3 >=2.10.0, <2.10.1	2.8.4 2.9.3 2.10.1

Affected products

tensorflow tensorflow

Classification

Weakness

CWE-20 Improper Input Validation
CWE-1284 Improper Validation of Specified Quantity in Input

References

github.com /tensorflow/tensorflow/commit/39ec7eaf1428e90c37787e5b3fbd68ebd3c48860
web, patch, third-party-advisory, advisory
github.com /tensorflow/tensorflow/security/advisories/GHSA-rmg2-f698-wq35
web, exploit, patch, third-party-advisory, advisory
github.com /tensorflow/tensorflow/blob/master/tensorflow/core/kernels/image/mirror_pad_op.cc
web, third-party-advisory, advisory
nvd.nist.gov /vuln/detail/CVE-2022-41896
advisory, web
github.com /tensorflow/tensorflow
package
pypi.org /project/tensorflow-gpu
package
github.com /advisories/GHSA-rmg2-f698-wq35
advisory
pypi.org /project/tensorflow
package
pypi.org /project/tensorflow-cpu
package

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.

Summary