Lucene search

Crashes due to overflow and `CHECK`-fail in ops with large tensor shapes

🗓️ 10 Nov 2021 19:35:35Reported by GitHub Advisory DatabaseType

Crashes due to overflow and `CHECK`-fail in ops with large tensor shapes. Overflow results in negative return from `MultiplyWithoutOverflow` leading to `CHECK`-failure

5 of 5AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 47
Cvelist	CVE-2021-41197 Crashes due to overflow and `CHECK`-fail in ops with large tensor shapes	5 Nov 202119:55	–	cvelist
Cvelist	CVE-2021-29584 CHECK-fail due to integer overflow	14 May 202119:15	–	cvelist
Cvelist	CVE-2021-41195 Crash in `tf.math.segment_*` operations	5 Nov 202119:50	–	cvelist
OSV	CVE-2021-41197	5 Nov 202120:15	–	osv
OSV	PYSEC-2021-607	5 Nov 202120:15	–	osv
OSV	BIT-TENSORFLOW-2021-41197	6 Mar 202411:16	–	osv
OSV	GHSA-PRCG-WP5Q-RV7P Crashes due to overflow and `CHECK`-fail in ops with large tensor shapes	10 Nov 202119:35	–	osv
OSV	PYSEC-2021-390	5 Nov 202120:15	–	osv
OSV	PYSEC-2021-805	5 Nov 202120:15	–	osv
OSV	GHSA-MW6J-HH29-H379 `CHECK` failure in depthwise ops via overflows	25 May 202219:33	–	osv

Vulners

Node

tensorflow-gpuRange<2.4.4

tensorflow-gpuRange2.5.0–2.5.2

tensorflow-gpuRange2.6.0–2.6.1

tensorflow-cpuRange<2.4.4

tensorflow-cpuRange2.5.0–2.5.2

tensorflow-cpuRange2.6.0–2.6.1

tensorflow tensorflowRange<2.4.4

tensorflow tensorflowRange2.5.0–2.5.2

tensorflow tensorflowRange2.6.0–2.6.1

Source	Link
github	www.github.com/tensorflow/tensorflow/security/advisories/GHSA-prcg-wp5q-rv7p
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-41197
github	www.github.com/tensorflow/tensorflow/issues/46890
github	www.github.com/tensorflow/tensorflow/issues/51908
github	www.github.com/tensorflow/tensorflow/commit/7c1692bd417eb4f9b33ead749a41166d6080af85
github	www.github.com/tensorflow/tensorflow/commit/a871989d7b6c18cdebf2fb4f0e5c5b62fbc19edf
github	www.github.com/tensorflow/tensorflow/commit/d81b1351da3e8c884ff836b64458d94e4a157c15
github	www.github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-607.yaml
github	www.github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-805.yaml
github	www.github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-390.yaml

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

10 Nov 2021 19:35Current

0.2Low risk

Vulners AI Score0.2

CVSS22.1

CVSS35.5

EPSS0.00024

CWE-190