BIT-tensorflow-2020-26267

2024-03-0611:20:17

Google

osv.dev

tensorflow

dataformatvecpermute

src_format

dst_format

memory access

6.6 Medium

AI Score

Confidence

Low

0.0005 Low

EPSS

Percentile

17.2%

JSON

In affected versions of TensorFlow the tf.raw_ops.DataFormatVecPermute API does not validate the src_format and dst_format attributes. The code assumes that these two arguments define a permutation of NHWC. This can result in uninitialized memory accesses, read outside of bounds and even crashes. This is fixed in versions 1.15.5, 2.0.4, 2.1.3, 2.2.2, 2.3.2, and 2.4.0.

CPENameOperatorVersion
tensorflowlt2.2.2
tensorflowge2.0.0
tensorflowlt2.0.4
tensorflowlt2.3.2
tensorflowge2.2.0
tensorflowge2.1.0
tensorflowlt1.15.5
tensorflowlt2.1.3
tensorflowge2.3.0

Name	Operator	Version
tensorflow	lt	2.2.2
tensorflow	ge	2.0.0
tensorflow	lt	2.0.4
tensorflow	lt	2.3.2
tensorflow	ge	2.2.0
tensorflow	ge	2.1.0
tensorflow	lt	1.15.5
tensorflow	lt	2.1.3
tensorflow	ge	2.3.0