Tensorflow is an Open Source Machine Learning Framework. The Grappler optimizer in TensorFlow can be used to cause a denial of service by altering a `SavedModel` such that `IsSimplifiableReshape` would trigger `CHECK` failures. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range.
Advisories
Source ID Title
EUVD EUVD EUVD-2022-0329 Tensorflow is an Open Source Machine Learning Framework. The Grappler optimizer in TensorFlow can be used to cause a denial of service by altering a `SavedModel` such that `IsSimplifiableReshape` would trigger `CHECK` failures. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range.
Github GHSA Github GHSA GHSA-fq86-3f29-px2c `CHECK`-failures during Grappler's `IsSimplifiableReshape` in Tensorflow
Fixes

Solution

No solution given by the vendor.


Workaround

No workaround given by the vendor.

History

Mon, 09 Nov 2026 20:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'poc', 'Technical Impact': 'partial'}, 'version': '2.0.3'}


Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: GitHub_M

Published:

Updated: 2025-04-22T18:25:07.180Z

Reserved: 2022-01-19T00:00:00.000Z

Link: CVE-2022-23581

cve-icon Vulnrichment

Updated: 2024-08-03T03:43:46.546Z

cve-icon NVD

Status : Modified

Published: 2022-02-04T23:15:14.713

Modified: 2026-06-17T04:30:24.413

Link: CVE-2022-23581

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses