Lucene search

K
osvGoogleOSV:GHSA-WVJW-P9F5-VQ28
HistoryMay 21, 2021 - 2:29 p.m.

Segfault in `tf.raw_ops.SparseCountSparseOutput`

2021-05-2114:29:02
Google
osv.dev
8
segfault
tensorflow
github commit
security guide
fuzzing
invalid arguments
cherrypick fix

EPSS

0

Percentile

12.8%

Impact

Passing invalid arguments (e.g., discovered via fuzzing) to tf.raw_ops.SparseCountSparseOutput results in segfault.

Patches

We have patched the issue in GitHub commit 82e6203221865de4008445b13c69b6826d2b28d9.

The fix will be included in TensorFlow 2.5.0. We will also cherrypick this commit on TensorFlow 2.4.2, TensorFlow 2.3.3, TensorFlow 2.2.3 and TensorFlow 2.1.4, as these are also affected and still in supported range.

For more information

Please consult our security guide for more information regarding the security model and how to contact us with issues and questions.

EPSS

0

Percentile

12.8%

Related for OSV:GHSA-WVJW-P9F5-VQ28