Heap OOB in `RaggedGather`

🗓️ 25 Aug 2021 14:59:43Reported by GitHub Advisory DatabaseType

Heap OOB in `RaggedGather` can trigger heap buffer read outside bounds in TensorFlow

5 of 5AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 17
RedhatCVE	CVE-2021-37641	6 Feb 202504:46	–	redhatcve
OSV	PYSEC-2021-263	12 Aug 202121:15	–	osv
OSV	PYSEC-2021-554	12 Aug 202121:15	–	osv
OSV	BIT-TENSORFLOW-2021-37641	6 Mar 202411:17	–	osv
OSV	CVE-2021-37641	12 Aug 202121:15	–	osv
OSV	GHSA-9C8H-VVRJ-W2P8 Heap OOB in `RaggedGather`	25 Aug 202114:43	–	osv
OSV	PYSEC-2021-752	12 Aug 202121:15	–	osv
OSV	OPENSUSE-SU-2022:10014-1 Security update for tensorflow2	18 Jun 202216:01	–	osv
OSV	OPENSUSE-SU-2024:12116-1 tensorflow-lite-2.9.1-1.1 on GA media	15 Jun 202400:00	–	osv
NVD	CVE-2021-37641	12 Aug 202121:15	–	nvd

Vulners

Node

tensorflow-gpu

tensorflow-gpuRange2.4.0–2.4.3

tensorflow-gpuRange<2.3.4

tensorflow-cpu

tensorflow-cpuRange2.4.0–2.4.3

tensorflow-cpuRange<2.3.4

tensorflow tensorflowMatch2.5.0

tensorflow tensorflowRange2.4.0–2.4.3

tensorflow tensorflowRange<2.3.4

Source	Link
github	www.github.com/tensorflow/tensorflow/security/advisories/GHSA-9c8h-vvrj-w2p8
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-37641
github	www.github.com/tensorflow/tensorflow/commit/a2b743f6017d7b97af1fe49087ae15f0ac634373
github	www.github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-554.yaml
github	www.github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-752.yaml
github	www.github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-263.yaml
github	www.github.com/advisories/GHSA-9c8h-vvrj-w2p8

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

25 Aug 2021 14:43Current

7.1High risk

Vulners AI Score7.1

CVSS23.6

CVSS37.1 - 7.3

EPSS0.0003

CWE-125