Skip to content
OpenAdvisories
Low · 2.5 CVE-2021-29520 BIT-tensorflow-2021-29520EUVD-2021-0261GHSA-wcv5-qrj6-9pfmPYSEC-2021-157PYSEC-2021-448PYSEC-2021-646

Heap buffer overflow in `Conv3DBackprop*`

Published May 14, 2021 · Updated Aug 3, 2024 · Assigned by GitHub_M

Description

TensorFlow is an end-to-end open source platform for machine learning. Missing validation between arguments to `tf.raw_ops.Conv3DBackprop*` operations can result in heap buffer overflows. This is because the implementation(https://github.com/tensorflow/tensorflow/blob/4814fafb0ca6b5ab58a09411523b2193fed23fed/tensorflow/core/kernels/conv_grad_shape_utils.cc#L94-L153) assumes that the `input`, `filter_sizes` and `out_backprop` tensors have the same shape, as they are accessed in parallel. The fix will be included in TensorFlow 2.5.0. We will also cherrypick this commit on TensorFlow 2.4.2, TensorFlow 2.3.3, TensorFlow 2.2.3 and TensorFlow 2.1.4, as these are also affected and still in supported range.

Affected products

VendorProductAffectedFixed
tensorflow tensorflow < 2.1.4, >= 2.2.0, < 2.2.3, >= 2.3.0, < 2.3.3, >= 2.4.0, < 2.4.2 —

Affected packages

EcosystemPackageAffectedFixedRecord
PyPI tensorflow < 2.1.4 2.1.4 GHSA-wcv5-qrj6-9pfm
PyPI tensorflow >= 2.2.0, < 2.2.3 2.2.3 GHSA-wcv5-qrj6-9pfm
PyPI tensorflow >= 2.3.0, < 2.3.3 2.3.3 GHSA-wcv5-qrj6-9pfm
PyPI tensorflow >= 2.4.0, < 2.4.2 2.4.2 GHSA-wcv5-qrj6-9pfm
PyPI tensorflow < 2.1.4 · >= 2.2.0, < 2.2.3 · >= 2.3.0, < 2.3.3 · >= 2.4.0, < 2.4.2 2.1.4, 2.2.3, 2.3.3, 2.4.2 PYSEC-2021-157
PyPI tensorflow-cpu < 2.1.4 2.1.4 GHSA-wcv5-qrj6-9pfm
PyPI tensorflow-cpu >= 2.2.0, < 2.2.3 2.2.3 GHSA-wcv5-qrj6-9pfm
PyPI tensorflow-cpu >= 2.3.0, < 2.3.3 2.3.3 GHSA-wcv5-qrj6-9pfm
PyPI tensorflow-cpu >= 2.4.0, < 2.4.2 2.4.2 GHSA-wcv5-qrj6-9pfm
PyPI tensorflow-cpu < 2.1.4 · >= 2.2.0, < 2.2.3 · >= 2.3.0, < 2.3.3 · >= 2.4.0, < 2.4.2 2.1.4, 2.2.3, 2.3.3, 2.4.2 PYSEC-2021-448
PyPI tensorflow-gpu < 2.1.4 2.1.4 GHSA-wcv5-qrj6-9pfm
PyPI tensorflow-gpu >= 2.2.0, < 2.2.3 2.2.3 GHSA-wcv5-qrj6-9pfm
PyPI tensorflow-gpu >= 2.3.0, < 2.3.3 2.3.3 GHSA-wcv5-qrj6-9pfm
PyPI tensorflow-gpu >= 2.4.0, < 2.4.2 2.4.2 GHSA-wcv5-qrj6-9pfm
PyPI tensorflow-gpu < 2.1.4 · >= 2.2.0, < 2.2.3 · >= 2.3.0, < 2.3.3 · >= 2.4.0, < 2.4.2 2.1.4, 2.2.3, 2.3.3, 2.4.2 PYSEC-2021-646

References