Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2022-41891

24
FAUCET Score

CVE-2022-41891 is a high-severity denial-of-service vulnerability affecting Google TensorFlow versions 2.8.x, 2.9.x, and 2.10.x. An attacker can trigger a segmentation fault by providing an empty element_shape to tf.raw_ops.TensorListConcat, leading to a system crash. This vulnerability has a CVSS score of 7.5, indicating a high impact on availability with low attack complexity and no user interaction required. There is currently no public exploit code available, nor is there evidence of active exploitation or significant community discussion.

Impacted Technologies

VendorProductVersion(s)CPE
< 2.8.4CPE matchmatch criteria
cpe:2.3:a:google:tensorflow:*:*:*:*:*:*:*:*
>= 2.9.0, < 2.9.3CPE matchmatch criteria
cpe:2.3:a:google:tensorflow:*:*:*:*:*:*:*:*
>= 2.10.0, < 2.10.1CPE matchmatch criteria
cpe:2.3:a:google:tensorflow:*:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 3.1

4.8MEDIUM

CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H

Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
Exploitability Score
1.2
Impact Score
3.6
CvssVersion
3.1

Exploit Intelligence

EPSS Score
0.43%
Probability of exploitation in next 30 days
EPSS Percentile
35.2%
Percentile rank of EPSS score among Peer Group
As of 2026-07-27
Model: v2026.06.15
This CVE's current EPSS score of 0.0043 is in the 14th percentile among its peer group of 51,551 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (14)

github_advisorypatch availablevia nvd_reference
View patch
microsoftpatch availablevia msrc
Product: 19510-16823Fixed in: 2.11.0-1
microsoftpatch availablevia msrc
Product: CBL Mariner 2.0 x64Fixed in: 2.11.0-1
microsoftpatch availablevia msrc
Product: CBL Mariner 2.0 ARMFixed in: 2.11.0-1
microsoftpatch availablevia msrc
Product: cbl2 tensorflow 2.11.0-1 on CBL Mariner 2.0Fixed in: 2.11.0-1
pippatch availablevia ghsa
Product: tensorflow-cpuFixed in: 2.9.3
pippatch availablevia ghsa
Product: tensorflow-gpuFixed in: 2.9.3
pippatch availablevia ghsa
Product: tensorflowFixed in: 2.8.4
pippatch availablevia ghsa
Product: tensorflow-gpuFixed in: 2.10.1
pippatch availablevia ghsa
Product: tensorflow-cpuFixed in: 2.10.1
pippatch availablevia ghsa
Product: tensorflowFixed in: 2.9.3
pippatch availablevia ghsa
Product: tensorflowFixed in: 2.10.1
pippatch availablevia ghsa
Product: tensorflow-cpuFixed in: 2.8.4
pippatch availablevia ghsa
Product: tensorflow-gpuFixed in: 2.8.4

Vendor Advisories (3)

microsoft2022-Dec/CVE-2022-41891

CVE-2022-41891

Dec 13, 2022
pipGHSA-66vq-54fq-6jvvmedium

Segfault in `tf.raw_ops.TensorListConcat`

Nov 21, 2022
microsoft2022-Nov/CVE-2022-41891Important

Segfault in `tf.raw_ops.TensorListConcat` in Tensorflow

Nov 8, 2022

References

github.com / tensorflow/tensorflow/blob/master/tensorflow/core/kernels/list_kernels.h
Third Party Advisory
github.com / tensorflow/tensorflow/commit/fc33f3dc4c14051a83eec6535b608abe1d355fde
PatchThird Party Advisory
github.com / tensorflow/tensorflow/security/advisories/GHSA-66vq-54fq-6jvv
ExploitPatchThird Party Advisory