Skip to content
OpenAdvisories
Low · 2.5 CVE-2021-29569 BIT-tensorflow-2021-29569EUVD-2021-0310GHSA-3h8m-483j-7xxmPYSEC-2021-206PYSEC-2021-497PYSEC-2021-695

Heap out of bounds read in `RequantizationRange`

Published May 14, 2021 · Updated Aug 3, 2024 · Assigned by GitHub_M

Description

TensorFlow is an end-to-end open source platform for machine learning. The implementation of `tf.raw_ops.MaxPoolGradWithArgmax` can cause reads outside of bounds of heap allocated data if attacker supplies specially crafted inputs. The implementation(https://github.com/tensorflow/tensorflow/blob/ac328eaa3870491ababc147822cd04e91a790643/tensorflow/core/kernels/requantization_range_op.cc#L49-L50) assumes that the `input_min` and `input_max` tensors have at least one element, as it accesses the first element in two arrays. If the tensors are empty, `.flat<T>()` is an empty object, backed by an empty array. Hence, accesing even the 0th element is a read outside the bounds. The fix will be included in TensorFlow 2.5.0. We will also cherrypick this commit on TensorFlow 2.4.2, TensorFlow 2.3.3, TensorFlow 2.2.3 and TensorFlow 2.1.4, as these are also affected and still in supported range.

Affected products

VendorProductAffectedFixed
tensorflow tensorflow < 2.1.4, >= 2.2.0, < 2.2.3, >= 2.3.0, < 2.3.3, >= 2.4.0, < 2.4.2 —

Affected packages

EcosystemPackageAffectedFixedRecord
PyPI tensorflow < 2.1.4 2.1.4 GHSA-3h8m-483j-7xxm
PyPI tensorflow >= 2.2.0, < 2.2.3 2.2.3 GHSA-3h8m-483j-7xxm
PyPI tensorflow >= 2.3.0, < 2.3.3 2.3.3 GHSA-3h8m-483j-7xxm
PyPI tensorflow >= 2.4.0, < 2.4.2 2.4.2 GHSA-3h8m-483j-7xxm
PyPI tensorflow < 2.1.4 · >= 2.2.0, < 2.2.3 · >= 2.3.0, < 2.3.3 · >= 2.4.0, < 2.4.2 2.1.4, 2.2.3, 2.3.3, 2.4.2 PYSEC-2021-206
PyPI tensorflow-cpu < 2.1.4 2.1.4 GHSA-3h8m-483j-7xxm
PyPI tensorflow-cpu >= 2.2.0, < 2.2.3 2.2.3 GHSA-3h8m-483j-7xxm
PyPI tensorflow-cpu >= 2.3.0, < 2.3.3 2.3.3 GHSA-3h8m-483j-7xxm
PyPI tensorflow-cpu >= 2.4.0, < 2.4.2 2.4.2 GHSA-3h8m-483j-7xxm
PyPI tensorflow-cpu < 2.1.4 · >= 2.2.0, < 2.2.3 · >= 2.3.0, < 2.3.3 · >= 2.4.0, < 2.4.2 2.1.4, 2.2.3, 2.3.3, 2.4.2 PYSEC-2021-497
PyPI tensorflow-gpu < 2.1.4 2.1.4 GHSA-3h8m-483j-7xxm
PyPI tensorflow-gpu >= 2.2.0, < 2.2.3 2.2.3 GHSA-3h8m-483j-7xxm
PyPI tensorflow-gpu >= 2.3.0, < 2.3.3 2.3.3 GHSA-3h8m-483j-7xxm
PyPI tensorflow-gpu >= 2.4.0, < 2.4.2 2.4.2 GHSA-3h8m-483j-7xxm
PyPI tensorflow-gpu < 2.1.4 · >= 2.2.0, < 2.2.3 · >= 2.3.0, < 2.3.3 · >= 2.4.0, < 2.4.2 2.1.4, 2.2.3, 2.3.3, 2.4.2 PYSEC-2021-695

References