Skip to content
OpenAdvisories
Low · 2.5 CVE-2021-29603 BIT-tensorflow-2021-29603EUVD-2021-0344GHSA-crch-j389-5f84PYSEC-2021-240PYSEC-2021-531PYSEC-2021-729

Heap OOB write in TFLite

Published May 14, 2021 · Updated Aug 3, 2024 · Assigned by GitHub_M

Description

TensorFlow is an end-to-end open source platform for machine learning. A specially crafted TFLite model could trigger an OOB write on heap in the TFLite implementation of `ArgMin`/`ArgMax`(https://github.com/tensorflow/tensorflow/blob/102b211d892f3abc14f845a72047809b39cc65ab/tensorflow/lite/kernels/arg_min_max.cc#L52-L59). If `axis_value` is not a value between 0 and `NumDimensions(input)`, then the condition in the `if` is never true, so code writes past the last valid element of `output_dims->data`. The fix will be included in TensorFlow 2.5.0. We will also cherrypick this commit on TensorFlow 2.4.2, TensorFlow 2.3.3, TensorFlow 2.2.3 and TensorFlow 2.1.4, as these are also affected and still in supported range.

Affected products

VendorProductAffectedFixed
tensorflow tensorflow < 2.1.4, >= 2.2.0, < 2.2.3, >= 2.3.0, < 2.3.3, >= 2.4.0, < 2.4.2 —

Affected packages

EcosystemPackageAffectedFixedRecord
PyPI tensorflow < 2.1.4 2.1.4 GHSA-crch-j389-5f84
PyPI tensorflow >= 2.2.0, < 2.2.3 2.2.3 GHSA-crch-j389-5f84
PyPI tensorflow >= 2.3.0, < 2.3.3 2.3.3 GHSA-crch-j389-5f84
PyPI tensorflow >= 2.4.0, < 2.4.2 2.4.2 GHSA-crch-j389-5f84
PyPI tensorflow < 2.1.4 · >= 2.2.0, < 2.2.3 · >= 2.3.0, < 2.3.3 · >= 2.4.0, < 2.4.2 2.1.4, 2.2.3, 2.3.3, 2.4.2 PYSEC-2021-240
PyPI tensorflow-cpu < 2.1.4 2.1.4 GHSA-crch-j389-5f84
PyPI tensorflow-cpu >= 2.2.0, < 2.2.3 2.2.3 GHSA-crch-j389-5f84
PyPI tensorflow-cpu >= 2.3.0, < 2.3.3 2.3.3 GHSA-crch-j389-5f84
PyPI tensorflow-cpu >= 2.4.0, < 2.4.2 2.4.2 GHSA-crch-j389-5f84
PyPI tensorflow-cpu < 2.1.4 · >= 2.2.0, < 2.2.3 · >= 2.3.0, < 2.3.3 · >= 2.4.0, < 2.4.2 2.1.4, 2.2.3, 2.3.3, 2.4.2 PYSEC-2021-531
PyPI tensorflow-gpu < 2.1.4 2.1.4 GHSA-crch-j389-5f84
PyPI tensorflow-gpu >= 2.2.0, < 2.2.3 2.2.3 GHSA-crch-j389-5f84
PyPI tensorflow-gpu >= 2.3.0, < 2.3.3 2.3.3 GHSA-crch-j389-5f84
PyPI tensorflow-gpu >= 2.4.0, < 2.4.2 2.4.2 GHSA-crch-j389-5f84
PyPI tensorflow-gpu < 2.1.4 · >= 2.2.0, < 2.2.3 · >= 2.3.0, < 2.3.3 · >= 2.4.0, < 2.4.2 2.1.4, 2.2.3, 2.3.3, 2.4.2 PYSEC-2021-729

References