{"schema_version":"1.9.0","id":"CVE-2022-23581","published":"2022-02-04T22:32:24Z","modified":"2026-08-12T13:00:22.767851Z","aliases":["BIT-tensorflow-2022-23581","GHSA-fq86-3f29-px2c","PYSEC-2022-145","PYSEC-2022-90","PYSEC-2026-3175"],"related":["openSUSE-SU-2024:12116-1"],"summary":"`CHECK`-failures during Grappler's `IsSimplifiableReshape` in Tensorflow","details":"Tensorflow is an Open Source Machine Learning Framework. The Grappler optimizer in TensorFlow can be used to cause a denial of service by altering a `SavedModel` such that `IsSimplifiableReshape` would trigger `CHECK` failures. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range.","affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/tensorflow/tensorflow","events":[{"introduced":"0"},{"last_affected":"957590ea15cc03ee2e00fc61934647d54836676f"},{"introduced":"919f693420e35d00c8d0a42100837ae3718f7927"},{"last_affected":"c2363d6d025981c661f8cbecf4c73ca7fbf38caf"},{"introduced":"c256c071bb26e1e13b4666d1b3e229e110bc914a"},{"fixed":"1fb27733f943295d874417630edd3b38b34ce082"},{"fixed":"240655511cd3e701155f944a972db71b6c0b1bb6"},{"fixed":"ebc1a2ffe5a7573d905e99bd0ee3568ee07c12c1"}],"database_specific":{"cpe":["cpe:2.3:a:google:tensorflow:*:*:*:*:*:*:*:*","cpe:2.3:a:google:tensorflow:2.7.0:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"0"},{"last_affected":"2.5.2"},{"introduced":"2.6.0"},{"last_affected":"2.6.2"},{"introduced":"2.7.0"},{"last_affected":"2.7.0"}],"source":["CPE_RANGE","CPE_STRING","REFERENCES"]}}],"versions":["2.7.0","v2.5.2","v2.6.2","v2.6.1","v2.6.0","v2.5.1","v2.5.0","v2.5.0-rc3","v2.5.0-rc2","v2.5.0-rc1","v2.5.0-rc0","v1.12.1","v1.9.0-rc2","v1.6.0-rc1","v1.1.0-rc2","v1.1.0-rc1","0.6.0","0.5.0"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-23581.json","vanir_signatures":[{"deprecated":false,"digest":{"function_hash":"60428052562836645689915853649096300717","length":462},"id":"CVE-2022-23581-02d098cc","signature_type":"Function","signature_version":"v1","source":"https://github.com/tensorflow/tensorflow/commit/ebc1a2ffe5a7573d905e99bd0ee3568ee07c12c1","target":{"file":"tensorflow/core/grappler/optimizers/constant_folding.cc","function":"ConstantFolding::SimplifyReshape"}},{"deprecated":false,"digest":{"line_hashes":["119950037816867698988284503655705673894","300183971683387255450238827776747827969","105225441913083009668310685762975952215","182164177950311513268161149728070381222","139751130630133826907223965208853096360"],"threshold":0.9},"id":"CVE-2022-23581-b40efb64","signature_type":"Line","signature_version":"v1","source":"https://github.com/tensorflow/tensorflow/commit/ebc1a2ffe5a7573d905e99bd0ee3568ee07c12c1","target":{"file":"tensorflow/core/grappler/optimizers/constant_folding.h"}},{"deprecated":false,"digest":{"function_hash":"282446183622685287017169331115815119935","length":2442},"id":"CVE-2022-23581-b8e14cad","signature_type":"Function","signature_version":"v1","source":"https://github.com/tensorflow/tensorflow/commit/240655511cd3e701155f944a972db71b6c0b1bb6","target":{"file":"tensorflow/core/grappler/optimizers/constant_folding.cc","function":"ConstantFolding::IsSimplifiableReshape"}},{"deprecated":false,"digest":{"function_hash":"108937133292191499137521582166130750804","length":1467},"id":"CVE-2022-23581-c9f8dfff","signature_type":"Function","signature_version":"v1","source":"https://github.com/tensorflow/tensorflow/commit/ebc1a2ffe5a7573d905e99bd0ee3568ee07c12c1","target":{"file":"tensorflow/core/grappler/optimizers/constant_folding.cc","function":"ConstantFolding::IsSimplifiableReshape"}},{"deprecated":false,"digest":{"line_hashes":["328763277001584054911904637593907139776","76536811408585770726539454830382505591","197435128369308252965593751916162804828","16653932598899127860287105031304192433","313501961681827370660494624391376251356","23259238521968614643015654509531808916","255475130872262181306065042244274402391","250297511009787528537414945425938653237","114281288583312364938687926027246146511","45178966217972043406678845575629412357","285956189640364701867856275524197264258","113080805207385975829452640657849200426","140208514048166887592231491636814350431","287901946609895513791859571475227782132","141484591989170339194235369612183515134","67535953356141525809399798818831224796","313232593577112759403949508494521561478","102495868916924740467831956077534610474","170367697546621774569605407413287488867","41380434449725661876902050003369492704","90459118289917094660943801069425303602","162305767033480325764159081892150144778","53369593955201560563131559778674621194","54131146959050045794105356190814495991","236295248214015132959568260851621866516","188878834775138955295670503079715975057","300987311683459313406244390645975712042","321204433749996956619660793790839168041","168450251660633564577541548908931438248","110827823984098206613132292282923890069","147984704998882669080322575485212727579","168544072421176958237055965329765795251","52932166097607677333550966219672934562","94850545959053876796722180039165847136","4811739361072355861839153829774422148","103869478055474575530491569122697168272","170546340776109144799373929024777660533","62425626509914868013783739320573427607"],"threshold":0.9},"id":"CVE-2022-23581-d8ac7d96","signature_type":"Line","signature_version":"v1","source":"https://github.com/tensorflow/tensorflow/commit/ebc1a2ffe5a7573d905e99bd0ee3568ee07c12c1","target":{"file":"tensorflow/core/grappler/optimizers/constant_folding.cc"}}],"vanir_signatures_modified":"2026-08-12T13:00:22Z"}}],"references":[{"type":"WEB","url":"https://github.com/tensorflow/tensorflow/blob/a1320ec1eac186da1d03f033109191f715b2b130/tensorflow/core/grappler/optimizers/constant_folding.cc#L1687-L1742"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/23xxx/CVE-2022-23581.json"},{"type":"ADVISORY","url":"https://github.com/tensorflow/tensorflow/security/advisories/GHSA-fq86-3f29-px2c"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-23581"},{"type":"FIX","url":"https://github.com/tensorflow/tensorflow/commit/1fb27733f943295d874417630edd3b38b34ce082"},{"type":"FIX","url":"https://github.com/tensorflow/tensorflow/commit/240655511cd3e701155f944a972db71b6c0b1bb6"},{"type":"FIX","url":"https://github.com/tensorflow/tensorflow/commit/ebc1a2ffe5a7573d905e99bd0ee3568ee07c12c1"}],"database_specific":{"cna_assigner":"GitHub_M","cwe_ids":["CWE-617"],"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/23xxx/CVE-2022-23581.json"},"severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"}]}