Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-7jnw-mvw8-qbcw
Vulnerability ID VCID-7jnw-mvw8-qbcw
Aliases CVE-2022-29213
GHSA-5889-7v45-q28m
Summary TensorFlow is an open source platform for machine learning. Prior to versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4, the `tf.compat.v1.signal.rfft2d` and `tf.compat.v1.signal.rfft3d` lack input validation and under certain condition can result in crashes (due to `CHECK`-failures). Versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4 contain a patch for this issue.
Status Published
Exploitability 0.5
Weighted Severity 6.2
Risk 3.1
Affected and Fixed Packages Package Details
Weaknesses (4)
CWE-20 Improper Input Validation
CWE-617 Reachable Assertion
CWE-1035 OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
CWE-937 OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
System Score Found at
epss 0.00106 https://api.first.org/data/v1/epss?cve=CVE-2022-29213
epss 0.00106 https://api.first.org/data/v1/epss?cve=CVE-2022-29213
epss 0.00106 https://api.first.org/data/v1/epss?cve=CVE-2022-29213
cvssv3.1_qr MODERATE https://github.com/advisories/GHSA-5889-7v45-q28m
cvssv3.1 5.5 https://github.com/tensorflow/tensorflow
generic_textual MODERATE https://github.com/tensorflow/tensorflow
cvssv3.1 5.5 https://github.com/tensorflow/tensorflow/commit/0a8a781e597b18ead006d19b7d23d0a369e9ad73
generic_textual MODERATE https://github.com/tensorflow/tensorflow/commit/0a8a781e597b18ead006d19b7d23d0a369e9ad73
ssvc Track https://github.com/tensorflow/tensorflow/commit/0a8a781e597b18ead006d19b7d23d0a369e9ad73
cvssv3.1 5.5 https://github.com/tensorflow/tensorflow/issues/55263
generic_textual MODERATE https://github.com/tensorflow/tensorflow/issues/55263
ssvc Track https://github.com/tensorflow/tensorflow/issues/55263
cvssv3.1 5.5 https://github.com/tensorflow/tensorflow/pull/55274
generic_textual MODERATE https://github.com/tensorflow/tensorflow/pull/55274
ssvc Track https://github.com/tensorflow/tensorflow/pull/55274
cvssv3.1 5.5 https://github.com/tensorflow/tensorflow/releases/tag/v2.6.4
generic_textual MODERATE https://github.com/tensorflow/tensorflow/releases/tag/v2.6.4
ssvc Track https://github.com/tensorflow/tensorflow/releases/tag/v2.6.4
cvssv3.1 5.5 https://github.com/tensorflow/tensorflow/releases/tag/v2.7.2
generic_textual MODERATE https://github.com/tensorflow/tensorflow/releases/tag/v2.7.2
ssvc Track https://github.com/tensorflow/tensorflow/releases/tag/v2.7.2
cvssv3.1 5.5 https://github.com/tensorflow/tensorflow/releases/tag/v2.8.1
generic_textual MODERATE https://github.com/tensorflow/tensorflow/releases/tag/v2.8.1
ssvc Track https://github.com/tensorflow/tensorflow/releases/tag/v2.8.1
cvssv3.1 5.5 https://github.com/tensorflow/tensorflow/releases/tag/v2.9.0
generic_textual MODERATE https://github.com/tensorflow/tensorflow/releases/tag/v2.9.0
ssvc Track https://github.com/tensorflow/tensorflow/releases/tag/v2.9.0
cvssv3.1 5.5 https://github.com/tensorflow/tensorflow/security/advisories/GHSA-5889-7v45-q28m
cvssv3.1_qr MODERATE https://github.com/tensorflow/tensorflow/security/advisories/GHSA-5889-7v45-q28m
generic_textual MODERATE https://github.com/tensorflow/tensorflow/security/advisories/GHSA-5889-7v45-q28m
ssvc Track https://github.com/tensorflow/tensorflow/security/advisories/GHSA-5889-7v45-q28m
cvssv3.1 5.5 https://nvd.nist.gov/vuln/detail/CVE-2022-29213
generic_textual MODERATE https://nvd.nist.gov/vuln/detail/CVE-2022-29213
Reference id Reference type URL
https://api.first.org/data/v1/epss?cve=CVE-2022-29213
https://github.com/tensorflow/tensorflow
0a8a781e597b18ead006d19b7d23d0a369e9ad73 https://github.com/tensorflow/tensorflow/commit/0a8a781e597b18ead006d19b7d23d0a369e9ad73
55263 https://github.com/tensorflow/tensorflow/issues/55263
55274 https://github.com/tensorflow/tensorflow/pull/55274
CVE-2022-29213 https://nvd.nist.gov/vuln/detail/CVE-2022-29213
GHSA-5889-7v45-q28m https://github.com/advisories/GHSA-5889-7v45-q28m
GHSA-5889-7v45-q28m https://github.com/tensorflow/tensorflow/security/advisories/GHSA-5889-7v45-q28m
v2.6.4 https://github.com/tensorflow/tensorflow/releases/tag/v2.6.4
v2.7.2 https://github.com/tensorflow/tensorflow/releases/tag/v2.7.2
v2.8.1 https://github.com/tensorflow/tensorflow/releases/tag/v2.8.1
v2.9.0 https://github.com/tensorflow/tensorflow/releases/tag/v2.9.0
No exploits are available.
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Found at https://github.com/tensorflow/tensorflow
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Found at https://github.com/tensorflow/tensorflow/commit/0a8a781e597b18ead006d19b7d23d0a369e9ad73
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-22T15:46:18Z/ Found at https://github.com/tensorflow/tensorflow/commit/0a8a781e597b18ead006d19b7d23d0a369e9ad73
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Found at https://github.com/tensorflow/tensorflow/issues/55263
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-22T15:46:18Z/ Found at https://github.com/tensorflow/tensorflow/issues/55263
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Found at https://github.com/tensorflow/tensorflow/pull/55274
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-22T15:46:18Z/ Found at https://github.com/tensorflow/tensorflow/pull/55274
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Found at https://github.com/tensorflow/tensorflow/releases/tag/v2.6.4
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-22T15:46:18Z/ Found at https://github.com/tensorflow/tensorflow/releases/tag/v2.6.4
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Found at https://github.com/tensorflow/tensorflow/releases/tag/v2.7.2
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-22T15:46:18Z/ Found at https://github.com/tensorflow/tensorflow/releases/tag/v2.7.2
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Found at https://github.com/tensorflow/tensorflow/releases/tag/v2.8.1
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-22T15:46:18Z/ Found at https://github.com/tensorflow/tensorflow/releases/tag/v2.8.1
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Found at https://github.com/tensorflow/tensorflow/releases/tag/v2.9.0
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-22T15:46:18Z/ Found at https://github.com/tensorflow/tensorflow/releases/tag/v2.9.0
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Found at https://github.com/tensorflow/tensorflow/security/advisories/GHSA-5889-7v45-q28m
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-22T15:46:18Z/ Found at https://github.com/tensorflow/tensorflow/security/advisories/GHSA-5889-7v45-q28m
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Found at https://nvd.nist.gov/vuln/detail/CVE-2022-29213
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Exploit Prediction Scoring System (EPSS)
Percentile 0.28258
EPSS Score 0.00106
Published At June 11, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-06-11T17:39:12.361544+00:00 Vulnrichment Import https://github.com/cisagov/vulnrichment/blob/develop/2022/29xxx/CVE-2022-29213.json 38.6.0