Executive brief
FractionalMaxPool and FractionalAVGPool heap out-of-bounds acess
Affected products
- PyPI tensorflow-cpu
- PyPI tensorflow-gpu
- PyPI tensorflow
Junglewise Threat Intelligence
CVE-2022-41900: PYSEC-2026-3383 - FractionalMaxPool and FractionalAVGPool heap out-of-bounds acess
CVE-2022-41900 · Severity: low · CVSS 3.1 · Published 2026-07-13
Technologies: tensorflow-cpu (PyPI), tensorflow-gpu (PyPI), tensorflow (PyPI). Vendors: PyPI.
Related threats
- PYSEC-2026-3331 - TensorFlow has segfault in array_ops.upper_bound
- PYSEC-2026-3182 - TensorFlow Denial of Service vulnerability
- PYSEC-2026-3300 - TensorFlow vulnerable to Out-of-Bounds Read in DynamicStitch
- PYSEC-2026-3362 - TensorFlow vulnerable to seg fault in `tf.raw_ops.Print`
- PYSEC-2026-3293 - TensorFlow vulnerable to integer overflow in EditDistance