Lucene search
GoogleOSV:CVE-2021-41224HistoryNov 05, 2021 - 9:15 p.m.
CVE-2021-41224
2021-11-0521:15:09
Google
osv.dev
5
tensorflow
machine learning
sparsefillemptyrows
heap out-of-bounds
vulnerability
fix
TensorFlow is an open source platform for machine learning. In affected versions the implementation of SparseFillEmptyRows can be made to trigger a heap OOB access. This occurs whenever the size of indices does not match the size of values. The fix will be included in TensorFlow 2.7.0. We will also cherrypick this commit on TensorFlow 2.6.1, TensorFlow 2.5.2, and TensorFlow 2.4.4, as these are also affected and still in supported range.
Related
osv
osv
PYSEC-2021-831
2021-11-05 21:15:00
PYSEC-2021-416
2021-11-05 21:15:00
`SparseFillEmptyRows` heap OOB
2021-11-10 18:45:55
cvelist
cvelist
CVE-2021-41224 `SparseFillEmptyRows` heap OOB read
2021-11-05 20:20:11
cnvd
cnvd
Google TensorFlow Heap Out-of-Bounds Access Vulnerability (CNVD-2021-85882)
2021-11-08 00:00:00
cve
cve
CVE-2021-41224
2021-11-05 21:15:09
nvd
nvd
CVE-2021-41224
2021-11-05 21:15:09
prion
prion
Design/Logic Flaw
2021-11-05 21:15:00
github
github
`SparseFillEmptyRows` heap OOB
2021-11-10 18:45:55
