Null pointer dereference in TFLite's `Reshape` operator

🗓️ 21 May 2021 14:26:58Reported by GitHub Advisory DatabaseType

Null pointer dereference in TFLite's `Reshape` operator fix missed case for target shape described by 1-D tensor. Patched in TensorFlow 2.5.0 and cherrypicked to earlier version

Reporter	Title	Published	Views	Family All 113
IBM Security Bulletins	Security Bulletin: Tensor Flow security vulnerabilities on IBM Watson Machine Learning on CP4D	7 Apr 202114:04	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple TensorFlow Vulnerabilities Affect IBM Watson Machine Learning on CP4D	2 Sep 202118:04	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery for IBM Cloud Pak for Data affected by vulnerability in TensorFlow	9 Dec 202004:43	–	ibm
IBM Security Bulletins	Security Bulletin: Numerous CVE entires for TensorFlow in Watson Machine Learning Community Edition	29 Oct 202021:58	–	ibm
IBM Security Bulletins	Security Bulletin: Tensor Flow security vulnerabilities on IBM Watson Machine Learning Server	21 Apr 202115:21	–	ibm
CNNVD	Google TensorFlow 代码问题漏洞	14 May 202100:00	–	cnnvd
CNVD	Google TensorFlow null pointer dereference vulnerability (CNVD-2021-36337)	17 May 202100:00	–	cnvd
CVE	CVE-2020-15209	25 Sep 202018:45	–	cve
CVE	CVE-2021-29592	14 May 202119:22	–	cve
Cvelist	CVE-2020-15209 Null pointer dereference in tensorflow-lite	25 Sep 202018:45	–	cvelist

Vulners

Node

tensorflow-gpuRange2.4.0–2.4.2pip

tensorflow-gpuRange2.3.0–2.3.3pip

tensorflow-gpuRange2.2.0–2.2.3pip

tensorflow-gpuRange<2.1.4pip

tensorflow-cpuRange2.4.0–2.4.2pip

tensorflow-cpuRange2.3.0–2.3.3pip

tensorflow-cpuRange2.2.0–2.2.3pip

tensorflow-cpuRange<2.1.4pip

tensorflow tensorflowRange2.4.0–2.4.2pip

tensorflow tensorflowRange2.3.0–2.3.3pip

tensorflow tensorflowRange2.2.0–2.2.3pip

tensorflow tensorflowRange<2.1.4pip

Source	Link
github	www.github.com/tensorflow/tensorflow/security/advisories/GHSA-jjr8-m8g8-p6wv
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-29592
github	www.github.com/tensorflow/tensorflow/commit/f8378920345f4f4604202d4ab15ef64b2aceaa16
github	www.github.com/tensorflow/tensorflow/blob/9c1dc920d8ffb4893d6c9d27d1f039607b326743/tensorflow/lite/core/subgraph.cc
github	www.github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-520.yaml
github	www.github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-718.yaml
github	www.github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-229.yaml
github	www.github.com/advisories/GHSA-jjr8-m8g8-p6wv