Skip to content
OpenAdvisories
Low · 2.5 CVE-2021-29579 BIT-tensorflow-2021-29579EUVD-2021-0320GHSA-79fv-9865-4qcvPYSEC-2021-216PYSEC-2021-507PYSEC-2021-705

Heap buffer overflow in `MaxPoolGrad`

Published May 14, 2021 · Updated Aug 3, 2024 · Assigned by GitHub_M

Description

TensorFlow is an end-to-end open source platform for machine learning. The implementation of `tf.raw_ops.MaxPoolGrad` is vulnerable to a heap buffer overflow. The implementation(https://github.com/tensorflow/tensorflow/blob/ab1e644b48c82cb71493f4362b4dd38f4577a1cf/tensorflow/core/kernels/maxpooling_op.cc#L194-L203) fails to validate that indices used to access elements of input/output arrays are valid. Whereas accesses to `input_backprop_flat` are guarded by `FastBoundsCheck`, the indexing in `out_backprop_flat` can result in OOB access. The fix will be included in TensorFlow 2.5.0. We will also cherrypick this commit on TensorFlow 2.4.2, TensorFlow 2.3.3, TensorFlow 2.2.3 and TensorFlow 2.1.4, as these are also affected and still in supported range.

Affected products

VendorProductAffectedFixed
tensorflow tensorflow < 2.1.4, >= 2.2.0, < 2.2.3, >= 2.3.0, < 2.3.3, >= 2.4.0, < 2.4.2 —

Affected packages

EcosystemPackageAffectedFixedRecord
PyPI tensorflow < 2.1.4 2.1.4 GHSA-79fv-9865-4qcv
PyPI tensorflow >= 2.2.0, < 2.2.3 2.2.3 GHSA-79fv-9865-4qcv
PyPI tensorflow >= 2.3.0, < 2.3.3 2.3.3 GHSA-79fv-9865-4qcv
PyPI tensorflow >= 2.4.0, < 2.4.2 2.4.2 GHSA-79fv-9865-4qcv
PyPI tensorflow < 2.1.4 · >= 2.2.0, < 2.2.3 · >= 2.3.0, < 2.3.3 · >= 2.4.0, < 2.4.2 2.1.4, 2.2.3, 2.3.3, 2.4.2 PYSEC-2021-216
PyPI tensorflow-cpu < 2.1.4 2.1.4 GHSA-79fv-9865-4qcv
PyPI tensorflow-cpu >= 2.2.0, < 2.2.3 2.2.3 GHSA-79fv-9865-4qcv
PyPI tensorflow-cpu >= 2.3.0, < 2.3.3 2.3.3 GHSA-79fv-9865-4qcv
PyPI tensorflow-cpu >= 2.4.0, < 2.4.2 2.4.2 GHSA-79fv-9865-4qcv
PyPI tensorflow-cpu < 2.1.4 · >= 2.2.0, < 2.2.3 · >= 2.3.0, < 2.3.3 · >= 2.4.0, < 2.4.2 2.1.4, 2.2.3, 2.3.3, 2.4.2 PYSEC-2021-507
PyPI tensorflow-gpu < 2.1.4 2.1.4 GHSA-79fv-9865-4qcv
PyPI tensorflow-gpu >= 2.2.0, < 2.2.3 2.2.3 GHSA-79fv-9865-4qcv
PyPI tensorflow-gpu >= 2.3.0, < 2.3.3 2.3.3 GHSA-79fv-9865-4qcv
PyPI tensorflow-gpu >= 2.4.0, < 2.4.2 2.4.2 GHSA-79fv-9865-4qcv
PyPI tensorflow-gpu < 2.1.4 · >= 2.2.0, < 2.2.3 · >= 2.3.0, < 2.3.3 · >= 2.4.0, < 2.4.2 2.1.4, 2.2.3, 2.3.3, 2.4.2 PYSEC-2021-705

References