tensorflow

Vulnerabilities (423)

• CVE-2021-41206HigNov 5, 2021
  affected >= 2.4.0, < 2.4.4fixed 2.4.4

  TensorFlow is an open source platform for machine learning. In affected versions several TensorFlow operations are missing validation for the shapes of the tensor arguments involved in the call. Depending on the API, this can result in undefined behavior and segfault or `CHECK`-f

• CVE-2021-41202MedNov 5, 2021
  affected >= 2.4.0, < 2.4.4fixed 2.4.4

  TensorFlow is an open source platform for machine learning. In affected versions while calculating the size of the output within the `tf.range` kernel, there is a conditional statement of type `int64 = condition ? int64 : double`. Due to C++ implicit conversion rules, both branch

• CVE-2021-41226HigNov 5, 2021
  affected < 2.4.4fixed 2.4.4

  TensorFlow is an open source platform for machine learning. In affected versions the implementation of `SparseBinCount` is vulnerable to a heap OOB access. This is because of missing validation between the elements of the `values` argument and the shape of the sparse output. The

• CVE-2021-41224HigNov 5, 2021
  affected < 2.4.4fixed 2.4.4

  TensorFlow is an open source platform for machine learning. In affected versions the implementation of `SparseFillEmptyRows` can be made to trigger a heap OOB access. This occurs whenever the size of `indices` does not match the size of `values`. The fix will be included in Tenso

• CVE-2021-41223HigNov 5, 2021
  affected < 2.4.4fixed 2.4.4

  TensorFlow is an open source platform for machine learning. In affected versions the implementation of `FusedBatchNorm` kernels is vulnerable to a heap OOB access. The fix will be included in TensorFlow 2.7.0. We will also cherrypick this commit on TensorFlow 2.6.1, TensorFlow 2.

• CVE-2021-41219HigNov 5, 2021
  affected < 2.4.4fixed 2.4.4

  TensorFlow is an open source platform for machine learning. In affected versions the code for sparse matrix multiplication is vulnerable to undefined behavior via binding a reference to `nullptr`. This occurs whenever the dimensions of `a` or `b` are 0 or less. In the case on one

• CVE-2021-41217MedNov 5, 2021
  affected < 2.4.4fixed 2.4.4

  TensorFlow is an open source platform for machine learning. In affected versions the process of building the control flow graph for a TensorFlow model is vulnerable to a null pointer exception when nodes that should be paired are not. This occurs because the code assumes that the

• CVE-2021-41215MedNov 5, 2021
  affected < 2.4.4fixed 2.4.4

  TensorFlow is an open source platform for machine learning. In affected versions the shape inference code for `DeserializeSparse` can trigger a null pointer dereference. This is because the shape inference function assumes that the `serialize_sparse` tensor is a tensor with posit

• CVE-2021-41214HigNov 5, 2021
  affected < 2.4.4fixed 2.4.4

  TensorFlow is an open source platform for machine learning. In affected versions the shape inference code for `tf.ragged.cross` has an undefined behavior due to binding a reference to `nullptr`. The fix will be included in TensorFlow 2.7.0. We will also cherrypick this commit on

• CVE-2021-41212HigNov 5, 2021
  affected < 2.4.4fixed 2.4.4

  TensorFlow is an open source platform for machine learning. In affected versions the shape inference code for `tf.ragged.cross` can trigger a read outside of bounds of heap allocated array. The fix will be included in TensorFlow 2.7.0. We will also cherrypick this commit on Tenso

• CVE-2021-41211HigNov 5, 2021
  affected >= 2.6.0, < 2.6.1fixed 2.6.1

  TensorFlow is an open source platform for machine learning. In affected versions the shape inference code for `QuantizeV2` can trigger a read outside of bounds of heap allocated array. This occurs whenever `axis` is a negative value less than `-1`. In this case, we are accessing

• CVE-2021-41205HigNov 5, 2021
  affected < 2.4.4fixed 2.4.4

  TensorFlow is an open source platform for machine learning. In affected versions the shape inference functions for the `QuantizeAndDequantizeV*` operations can trigger a read outside of bounds of heap allocated array. The fix will be included in TensorFlow 2.7.0. We will also che

• CVE-2021-41204MedNov 5, 2021
  affected < 2.4.4fixed 2.4.4

  TensorFlow is an open source platform for machine learning. In affected versions during TensorFlow's Grappler optimizer phase, constant folding might attempt to deep copy a resource tensor. This results in a segfault, as these tensors are supposed to not change. The fix will be i

• CVE-2021-41203HigNov 5, 2021
  affected < 2.4.4fixed 2.4.4

  TensorFlow is an open source platform for machine learning. In affected versions an attacker can trigger undefined behavior, integer overflows, segfaults and `CHECK`-fail crashes if they can change saved checkpoints from outside of TensorFlow. This is because the checkpoints load

• CVE-2021-41210HigNov 5, 2021
  affected < 2.4.4fixed 2.4.4

  TensorFlow is an open source platform for machine learning. In affected versions the shape inference functions for `SparseCountSparseOutput` can trigger a read outside of bounds of heap allocated array. The fix will be included in TensorFlow 2.7.0. We will also cherrypick this co

• CVE-2021-41201HigNov 5, 2021
  affected < 2.4.4fixed 2.4.4

  TensorFlow is an open source platform for machine learning. In affeced versions during execution, `EinsumHelper::ParseEquation()` is supposed to set the flags in `input_has_ellipsis` vector and `*output_has_ellipsis` boolean to indicate whether there is ellipsis in the correspond

• CVE-2021-41200MedNov 5, 2021
  affected < 2.4.4fixed 2.4.4

  TensorFlow is an open source platform for machine learning. In affected versions if `tf.summary.create_file_writer` is called with non-scalar arguments code crashes due to a `CHECK`-fail. The fix will be included in TensorFlow 2.7.0. We will also cherrypick this commit on TensorF

• CVE-2021-41199MedNov 5, 2021
  affected < 2.4.4fixed 2.4.4

  TensorFlow is an open source platform for machine learning. In affected versions if `tf.image.resize` is called with a large input argument then the TensorFlow process will crash due to a `CHECK`-failure caused by an overflow. The number of elements in the output tensor is too mu

• CVE-2021-41198MedNov 5, 2021
  affected < 2.4.4fixed 2.4.4

  TensorFlow is an open source platform for machine learning. In affected versions if `tf.tile` is called with a large input argument then the TensorFlow process will crash due to a `CHECK`-failure caused by an overflow. The number of elements in the output tensor is too much for t

• CVE-2021-41197MedNov 5, 2021
  affected < 2.4.4fixed 2.4.4

  TensorFlow is an open source platform for machine learning. In affected versions TensorFlow allows tensor to have a large number of dimensions and each dimension can be as large as desired. However, the total number of elements in a tensor must fit within an `int64_t`. If an over