Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-6d3g-yrc1-skgp
Vulnerability ID VCID-6d3g-yrc1-skgp
Aliases CVE-2022-41891
GHSA-66vq-54fq-6jvv
Summary TensorFlow is an open source platform for machine learning. If `tf.raw_ops.TensorListConcat` is given `element_shape=[]`, it results segmentation fault which can be used to trigger a denial of service attack. We have patched the issue in GitHub commit fc33f3dc4c14051a83eec6535b608abe1d355fde. The fix will be included in TensorFlow 2.11. We will also cherrypick this commit on TensorFlow 2.10.1, 2.9.3, and TensorFlow 2.8.4, as these are also affected and still in supported range.
Status Published
Exploitability 0.5
Weighted Severity 6.2
Risk 3.1
Affected and Fixed Packages Package Details
Weaknesses (3)
CWE-20 Improper Input Validation
CWE-1035 OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
CWE-937 OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
System Score Found at
epss 0.00152 https://api.first.org/data/v1/epss?cve=CVE-2022-41891
epss 0.00152 https://api.first.org/data/v1/epss?cve=CVE-2022-41891
cvssv3.1_qr MODERATE https://github.com/advisories/GHSA-66vq-54fq-6jvv
cvssv3.1 4.8 https://github.com/tensorflow/tensorflow
generic_textual MODERATE https://github.com/tensorflow/tensorflow
cvssv3.1 4.8 https://github.com/tensorflow/tensorflow/blob/master/tensorflow/core/kernels/list_kernels.h
generic_textual MODERATE https://github.com/tensorflow/tensorflow/blob/master/tensorflow/core/kernels/list_kernels.h
ssvc Track https://github.com/tensorflow/tensorflow/blob/master/tensorflow/core/kernels/list_kernels.h
cvssv3.1 4.8 https://github.com/tensorflow/tensorflow/commit/fc33f3dc4c14051a83eec6535b608abe1d355fde
generic_textual MODERATE https://github.com/tensorflow/tensorflow/commit/fc33f3dc4c14051a83eec6535b608abe1d355fde
ssvc Track https://github.com/tensorflow/tensorflow/commit/fc33f3dc4c14051a83eec6535b608abe1d355fde
cvssv3.1 4.8 https://github.com/tensorflow/tensorflow/security/advisories/GHSA-66vq-54fq-6jvv
cvssv3.1_qr MODERATE https://github.com/tensorflow/tensorflow/security/advisories/GHSA-66vq-54fq-6jvv
generic_textual MODERATE https://github.com/tensorflow/tensorflow/security/advisories/GHSA-66vq-54fq-6jvv
ssvc Track https://github.com/tensorflow/tensorflow/security/advisories/GHSA-66vq-54fq-6jvv
cvssv3.1 4.8 https://nvd.nist.gov/vuln/detail/CVE-2022-41891
generic_textual MODERATE https://nvd.nist.gov/vuln/detail/CVE-2022-41891
Reference id Reference type URL
https://api.first.org/data/v1/epss?cve=CVE-2022-41891
https://github.com/tensorflow/tensorflow
CVE-2022-41891 https://nvd.nist.gov/vuln/detail/CVE-2022-41891
fc33f3dc4c14051a83eec6535b608abe1d355fde https://github.com/tensorflow/tensorflow/commit/fc33f3dc4c14051a83eec6535b608abe1d355fde
GHSA-66vq-54fq-6jvv https://github.com/advisories/GHSA-66vq-54fq-6jvv
GHSA-66vq-54fq-6jvv https://github.com/tensorflow/tensorflow/security/advisories/GHSA-66vq-54fq-6jvv
list_kernels.h https://github.com/tensorflow/tensorflow/blob/master/tensorflow/core/kernels/list_kernels.h
No exploits are available.
Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H Found at https://github.com/tensorflow/tensorflow
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H Found at https://github.com/tensorflow/tensorflow/blob/master/tensorflow/core/kernels/list_kernels.h
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-22T15:42:16Z/ Found at https://github.com/tensorflow/tensorflow/blob/master/tensorflow/core/kernels/list_kernels.h
Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H Found at https://github.com/tensorflow/tensorflow/commit/fc33f3dc4c14051a83eec6535b608abe1d355fde
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-22T15:42:16Z/ Found at https://github.com/tensorflow/tensorflow/commit/fc33f3dc4c14051a83eec6535b608abe1d355fde
Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H Found at https://github.com/tensorflow/tensorflow/security/advisories/GHSA-66vq-54fq-6jvv
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-22T15:42:16Z/ Found at https://github.com/tensorflow/tensorflow/security/advisories/GHSA-66vq-54fq-6jvv
Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H Found at https://nvd.nist.gov/vuln/detail/CVE-2022-41891
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Exploit Prediction Scoring System (EPSS)
Percentile 0.35651
EPSS Score 0.00152
Published At June 11, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-06-11T17:40:45.303246+00:00 Vulnrichment Import https://github.com/cisagov/vulnrichment/blob/develop/2022/41xxx/CVE-2022-41891.json 38.6.0