{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-08-01T14:20:20.905","vulnerabilities":[{"cve":{"id":"CVE-2022-29207","sourceIdentifier":"security-advisories@github.com","published":"2022-05-20T22:16:40.997","lastModified":"2026-06-17T04:39:49.437","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"TensorFlow is an open source platform for machine learning. Prior to versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4, multiple TensorFlow operations misbehave in eager mode when the resource handle provided to them is invalid. In graph mode, it would have been impossible to perform these API calls, but migration to TF 2.x eager mode opened up this vulnerability. If the resource handle is empty, then a reference is bound to a null pointer inside TensorFlow codebase (various codepaths). This is undefined behavior. Versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4 contain a patch for this issue."},{"lang":"es","value":"TensorFlow es una plataforma de código abierto para el aprendizaje automático. En versiones anteriores a 2.9.0, 2.8.1, 2.7.2 y 2.6.4, varias operaciones de TensorFlow se comportaban inapropiadamente en modo eager cuando el manejador de recursos que les era proporcionado no era válido. En el modo gráfico, habría sido imposible llevar a cabo estas llamadas a la API, pero la migración al modo eager de TF 2.x abrió esta vulnerabilidad. Si el manejador de recursos está vacío, entonces una referencia está ligada a un puntero null dentro de la base de código de TensorFlow (varios codepaths). Esto es un comportamiento no definido. Las versiones 2.9.0, 2.8.1, 2.7.2 y 2.6.4 contienen un parche para este problema"}],"affected":[{"source":"security-advisories@github.com","affectedData":[{"vendor":"tensorflow","product":"tensorflow","versions":[{"version":"< 2.6.4","status":"affected"},{"version":">= 2.7.0rc0, < 2.7.2","status":"affected"},{"version":">= 2.8.0rc0, < 2.8.1","status":"affected"},{"version":">= 2.9.0rc0, < 2.9.0","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"security-advisories@github.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","baseScore":2.1,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-04-22T15:47:06.682002Z","id":"CVE-2022-29207","options":[{"exploitation":"poc"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"security-advisories@github.com","type":"Secondary","description":[{"lang":"en","value":"CWE-20"},{"lang":"en","value":"CWE-475"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:google:tensorflow:*:*:*:*:*:*:*:*","versionEndExcluding":"2.6.4","matchCriteriaId":"D9359D32-D090-44CF-AC43-2046084A28BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:tensorflow:*:*:*:*:*:*:*:*","versionStartIncluding":"2.7.0","versionEndExcluding":"2.7.2","matchCriteriaId":"C4DFBF2D-5283-42F6-8800-D653BFA5CE82"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:tensorflow:2.7.0:rc0:*:*:*:*:*:*","matchCriteriaId":"A58EDA5C-66D6-46F1-962E-60AFB7C784A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:tensorflow:2.7.0:rc1:*:*:*:*:*:*","matchCriteriaId":"89522760-C2DF-400D-9624-626D8F160CBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:tensorflow:2.8.0:-:*:*:*:*:*:*","matchCriteriaId":"E9EA1898-ACAA-4699-8BAE-54D62C1819FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:tensorflow:2.8.0:rc0:*:*:*:*:*:*","matchCriteriaId":"130DE3C9-6842-456F-A259-BF8FF8457217"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:tensorflow:2.8.0:rc1:*:*:*:*:*:*","matchCriteriaId":"BBF2FCEF-989C-409D-9F4C-81418C65B972"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:tensorflow:2.9.0:rc0:*:*:*:*:*:*","matchCriteriaId":"9CFB1CFC-579D-4647-A472-6DE8BE1951DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:tensorflow:2.9.0:rc1:*:*:*:*:*:*","matchCriteriaId":"F3F3F37E-D27F-4060-830C-0AFF16150777"}]}]}],"references":[{"url":"https://github.com/tensorflow/tensorflow/commit/a5b89cd68c02329d793356bda85d079e9e69b4e7","source":"security-advisories@github.com","tags":["Patch","Third Party Advisory"]},{"url":"https://github.com/tensorflow/tensorflow/commit/dbdd98c37bc25249e8f288bd30d01e118a7b4498","source":"security-advisories@github.com","tags":["Patch","Third Party Advisory"]},{"url":"https://github.com/tensorflow/tensorflow/releases/tag/v2.6.4","source":"security-advisories@github.com","tags":["Release Notes","Third Party Advisory"]},{"url":"https://github.com/tensorflow/tensorflow/releases/tag/v2.7.2","source":"security-advisories@github.com","tags":["Release Notes","Third Party Advisory"]},{"url":"https://github.com/tensorflow/tensorflow/releases/tag/v2.8.1","source":"security-advisories@github.com","tags":["Release Notes","Third Party Advisory"]},{"url":"https://github.com/tensorflow/tensorflow/releases/tag/v2.9.0","source":"security-advisories@github.com","tags":["Release Notes","Third Party Advisory"]},{"url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-5wpj-c6f7-24x8","source":"security-advisories@github.com","tags":["Exploit","Patch","Third Party Advisory"]},{"url":"https://github.com/tensorflow/tensorflow/commit/a5b89cd68c02329d793356bda85d079e9e69b4e7","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"https://github.com/tensorflow/tensorflow/commit/dbdd98c37bc25249e8f288bd30d01e118a7b4498","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"https://github.com/tensorflow/tensorflow/releases/tag/v2.6.4","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes","Third Party Advisory"]},{"url":"https://github.com/tensorflow/tensorflow/releases/tag/v2.7.2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes","Third Party Advisory"]},{"url":"https://github.com/tensorflow/tensorflow/releases/tag/v2.8.1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes","Third Party Advisory"]},{"url":"https://github.com/tensorflow/tensorflow/releases/tag/v2.9.0","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes","Third Party Advisory"]},{"url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-5wpj-c6f7-24x8","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Third Party Advisory"]}]}}]}