Executive brief
Null pointer dereference in Grappler's `IsConstant`
Affected products
- PyPI tensorflow-cpu
- PyPI tensorflow-gpu
- PyPI tensorflow
Junglewise Threat Intelligence
CVE-2022-23589: PYSEC-2026-3154 - Null pointer dereference in Grappler's `IsConstant`
CVE-2022-23589 · Severity: low · CVSS 3.1 · Published 2026-07-09
Technologies: tensorflow-cpu (PyPI), tensorflow-gpu (PyPI). Vendors: PyPI.
Related threats
- PYSEC-2026-3331 - TensorFlow has segfault in array_ops.upper_bound
- PYSEC-2026-3182 - TensorFlow Denial of Service vulnerability
- PYSEC-2026-3300 - TensorFlow vulnerable to Out-of-Bounds Read in DynamicStitch
- PYSEC-2026-3362 - TensorFlow vulnerable to seg fault in `tf.raw_ops.Print`
- PYSEC-2026-3293 - TensorFlow vulnerable to integer overflow in EditDistance