AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2022-41900

HIGH · CVSS 7.1 EPSS 0.58% Public Exploit

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2022-11-18 · Last synced 2026-08-04

CyberRota Analysis

This is a high severity vulnerability with a CVSS score of 7.1. It affects F5, GitHub. Public exploit code or proof-of-concept references have been detected in its references. It may be remotely exploitable.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

Detected Signals
exploit remote code execution code execution

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2022-41900
Severity
HIGH
CVSS
7.1
EPSS
0.58%
F5 GitHub

Original NVD Description

TensorFlow is an open source platform for machine learning. The security vulnerability results in FractionalMax(AVG)Pool with illegal pooling_ratio. Attackers using Tensorflow can exploit the vulnerability. They can access heap memory which is not in the control of user, leading to a crash or remote code execution. We have patched the issue in GitHub commit 216525144ee7c910296f5b05d214ca1327c9ce48. The fix will be included in TensorFlow 2.11.0. We will also cherry pick this commit on TensorFlow 2.10.1.

Related CVEs

Other vulnerabilities affecting the same vendor(s)