Skip to content
OpenAdvisories
Low · 2.5 CVE-2021-29578 BIT-tensorflow-2021-29578EUVD-2021-0319GHSA-6f89-8j54-29xfPYSEC-2021-215PYSEC-2021-506PYSEC-2021-704

Heap buffer overflow in `FractionalAvgPoolGrad`

Published May 14, 2021 · Updated Aug 3, 2024 · Assigned by GitHub_M

Description

TensorFlow is an end-to-end open source platform for machine learning. The implementation of `tf.raw_ops.FractionalAvgPoolGrad` is vulnerable to a heap buffer overflow. The implementation(https://github.com/tensorflow/tensorflow/blob/dcba796a28364d6d7f003f6fe733d82726dda713/tensorflow/core/kernels/fractional_avg_pool_op.cc#L216) fails to validate that the pooling sequence arguments have enough elements as required by the `out_backprop` tensor shape. The fix will be included in TensorFlow 2.5.0. We will also cherrypick this commit on TensorFlow 2.4.2, TensorFlow 2.3.3, TensorFlow 2.2.3 and TensorFlow 2.1.4, as these are also affected and still in supported range.

Affected products

VendorProductAffectedFixed
tensorflow tensorflow < 2.1.4, >= 2.2.0, < 2.2.3, >= 2.3.0, < 2.3.3, >= 2.4.0, < 2.4.2 —

Affected packages

EcosystemPackageAffectedFixedRecord
PyPI tensorflow < 2.1.4 2.1.4 GHSA-6f89-8j54-29xf
PyPI tensorflow >= 2.2.0, < 2.2.3 2.2.3 GHSA-6f89-8j54-29xf
PyPI tensorflow >= 2.3.0, < 2.3.3 2.3.3 GHSA-6f89-8j54-29xf
PyPI tensorflow >= 2.4.0, < 2.4.2 2.4.2 GHSA-6f89-8j54-29xf
PyPI tensorflow < 2.1.4 · >= 2.2.0, < 2.2.3 · >= 2.3.0, < 2.3.3 · >= 2.4.0, < 2.4.2 2.1.4, 2.2.3, 2.3.3, 2.4.2 PYSEC-2021-215
PyPI tensorflow-cpu < 2.1.4 2.1.4 GHSA-6f89-8j54-29xf
PyPI tensorflow-cpu >= 2.2.0, < 2.2.3 2.2.3 GHSA-6f89-8j54-29xf
PyPI tensorflow-cpu >= 2.3.0, < 2.3.3 2.3.3 GHSA-6f89-8j54-29xf
PyPI tensorflow-cpu >= 2.4.0, < 2.4.2 2.4.2 GHSA-6f89-8j54-29xf
PyPI tensorflow-cpu < 2.1.4 · >= 2.2.0, < 2.2.3 · >= 2.3.0, < 2.3.3 · >= 2.4.0, < 2.4.2 2.1.4, 2.2.3, 2.3.3, 2.4.2 PYSEC-2021-506
PyPI tensorflow-gpu < 2.1.4 2.1.4 GHSA-6f89-8j54-29xf
PyPI tensorflow-gpu >= 2.2.0, < 2.2.3 2.2.3 GHSA-6f89-8j54-29xf
PyPI tensorflow-gpu >= 2.3.0, < 2.3.3 2.3.3 GHSA-6f89-8j54-29xf
PyPI tensorflow-gpu >= 2.4.0, < 2.4.2 2.4.2 GHSA-6f89-8j54-29xf
PyPI tensorflow-gpu < 2.1.4 · >= 2.2.0, < 2.2.3 · >= 2.3.0, < 2.3.3 · >= 2.4.0, < 2.4.2 2.1.4, 2.2.3, 2.3.3, 2.4.2 PYSEC-2021-704

References