Lucene search
GoogleOSV:PYSEC-2021-406HistoryNov 05, 2021 - 9:15 p.m.
PYSEC-2021-406
2021-11-0521:15:00
Google
osv.dev
8
0.0005 Low
EPSS
Percentile
17.8%
TensorFlow is an open source platform for machine learning. In affected versions the shape inference code for tf.ragged.cross has an undefined behavior due to binding a reference to nullptr. The fix will be included in TensorFlow 2.7.0. We will also cherrypick this commit on TensorFlow 2.6.1, TensorFlow 2.5.2, and TensorFlow 2.4.4, as these are also affected and still in supported range.
| CPE | Name | Operator | Version |
|---|---|---|---|
| tensorflow | eq | 1.2.0 | |
| tensorflow | eq | 2.0.3 | |
| tensorflow | eq | 1.10.0 | |
| tensorflow | eq | 1.6.0 | |
| tensorflow | eq | 2.3.0 | |
| tensorflow | eq | 1.15.0 | |
| tensorflow | eq | 2.2.0rc4 | |
| tensorflow | eq | 2.3.0rc0 | |
| tensorflow | eq | 1.4.0 | |
| tensorflow | eq | 1.15.2 |
Related
cve
cve
CVE-2021-41214
2021-11-05 21:15:08
prion
prion
Stack overflow
2021-11-05 21:15:00
osv
osv
CVE-2021-41214
2021-11-05 21:15:08
PYSEC-2021-623
2021-11-05 21:15:00
Reference binding to `nullptr` in `tf.ragged.cross`
2021-11-10 18:58:16
github
github
Reference binding to `nullptr` in `tf.ragged.cross`
2021-11-10 18:58:16
cvelist
cvelist
CVE-2021-41214 Reference binding to `nullptr` in `tf.ragged.cross`
2021-11-05 20:50:11
cnvd
cnvd
Google TensorFlow buffer overflow vulnerability (CNVD-2022-09870)
2021-11-24 00:00:00
nvd
nvd
CVE-2021-41214
2021-11-05 21:15:08
