CVE-2022-35952

TensorFlow is an open source platform for machine learning. The `UnbatchGradOp` function takes an argument `id` that is assumed to be a scalar. A nonscalar `id` can trigger a `CHECK` failure and crash the program. It also requires its argument `batch_index` to contain three times the number of elements as indicated in its `batch_index.dim_size(0)`. An incorrect `batch_index` can trigger a `CHECK` failure and crash the program. We have patched the issue in GitHub commit 5f945fc6409a3c1e90d6970c9292f805f6e6ddf2. The fix will be included in TensorFlow 2.10.0. We will also cherrypick this commit on TensorFlow 2.9.1, TensorFlow 2.8.1, and TensorFlow 2.7.2, as these are also affected and still in supported range. There are no known workarounds for this issue.

• CWE-617
• CWE-617

• https://github.com/tensorflow/tensorflow/blob/769eddaf479c8debead9a59a72617d6ed6f0fe10/tensorflow/core/kernels/batch_kernels.cc#L891Third Party Advisory
• https://github.com/tensorflow/tensorflow/commit/5f945fc6409a3c1e90d6970c9292f805f6e6ddf2Patch, Third Party Advisory
• https://github.com/tensorflow/tensorflow/security/advisories/GHSA-h5vq-gw2c-pq47Patch, Third Party Advisory
• https://github.com/tensorflow/tensorflow/blob/769eddaf479c8debead9a59a72617d6ed6f0fe10/tensorflow/core/kernels/batch_kernels.cc#L891Third Party Advisory
• https://github.com/tensorflow/tensorflow/commit/5f945fc6409a3c1e90d6970c9292f805f6e6ddf2Patch, Third Party Advisory
• https://github.com/tensorflow/tensorflow/security/advisories/GHSA-h5vq-gw2c-pq47Patch, Third Party Advisory

Published

Sep 16, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-35947GLPI stands for Gestionnaire Libre de Parc Informatique and …9.8
• CVE-2022-35948undici is an HTTP/1.1 client, written from scratch for Node.…5.3
• CVE-2022-35949undici is an HTTP/1.1 client, written from scratch for Node.…9.8
• CVE-2022-3595A vulnerability was found in Linux Kernel. It has been rated…5.5
• CVE-2022-35950OroCommerce is an open-source Business to Business Commerce …4.8
• CVE-2022-35951Redis is an in-memory database that persists on disk. Versio…9.8
• CVE-2022-35953BookWyrm is a social network for tracking your reading, talk…6.1
• CVE-2022-35954The GitHub Actions ToolKit provides a set of packages to mak…5
• CVE-2022-35956This Rails gem adds two methods to the ActiveRecord::Base cl…9.8
• CVE-2022-35957Grafana is an open-source platform for monitoring and observ…6.6
• CVE-2022-35958Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2022-35959TensorFlow is an open source platform for machine learning. …7.5