CVE-2021-37680 Division by zero in TFLite in TensorFlow

TensorFlow is an end-to-end open source platform for machine learning. In affected versions the implementation of fully connected layers in TFLite is vulnerable to a division by zero error. We have patched the issue in GitHub commit 718721986aa137691ee23f03638867151f74935f. The fix will be includ...

CVE-2021-37675

TensorFlow is an end-to-end open source platform for machine learning. In affected versions most implementations of convolution operators in TensorFlow are affected by a division by 0 vulnerability where an attacker can trigger a denial of service via a crash. The shape inference implementation i...

CVE-2021-37675 Division by 0 in most convolution operators in TensorFlow

TensorFlow is an end-to-end open source platform for machine learning. In affected versions most implementations of convolution operators in TensorFlow are affected by a division by 0 vulnerability where an attacker can trigger a denial of service via a crash. The shape inference implementation i...

CVE-2021-37675

CVE-2021-37675 : TensorFlow denial-of-service caused by a division-by-zero in the shape inference path of most convolution operators. Root cause: missing validations before divisions/modulo in the common_shape_fns.cc implementation. Patch is in commit 8a793b5d7f59e37ac7f3cd0954a750a2fe76bad4 and ...

CVE-2021-37676

TensorFlow CVE-2021-37676 involves a vulnerability in SparseFillEmptyRows where the shape-inference code can bind a null pointer, causing undefined behavior. The issue has been patched in a GitHub commit and the fix is scheduled for TensorFlow 2.6.0, with cherry-picks to 2.5.1, 2.4.3, and 2.3.4 (...

CVE-2021-37676

TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can cause undefined behavior via binding a reference to null pointer in tf.rawops.SparseFillEmptyRows. The shape inference implementation does not validate that the input arguments are not empt...

CVE-2021-37676 Reference binding to nullptr in shape inference in TensorFlow

TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can cause undefined behavior via binding a reference to null pointer in tf.rawops.SparseFillEmptyRows. The shape inference implementation does not validate that the input arguments are not empt...

CVE-2021-37671

TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can cause undefined behavior via binding a reference to null pointer in tf.rawops.Map and tf.rawops.OrderedMap operations. The implementation has a check in place to ensure that indices is in...

CVE-2021-37671 Reference binding to nullptr in map operations in TensorFlow

TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can cause undefined behavior via binding a reference to null pointer in tf.rawops.Map and tf.rawops.OrderedMap operations. The implementation has a check in place to ensure that indices is in...

CVE-2021-37671

TensorFlow CVE-2021-37671 describes a local-issue in tf.raw_ops.Map* and tf.raw_ops.OrderedMap* where binding a reference to a null pointer can occur if indices is empty, due to a missing check despite a ascending-order validation. The publicly documented fix was committed (532f5c5a…) and will be...

CVE-2021-37666 Reference binding to nullptr in `RaggedTensorToVariant` in TensorFlow

TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can cause undefined behavior via binding a reference to null pointer in tf.rawops.RaggedTensorToVariant. The implementation has an incomplete validation of the splits values, missing the case...

CVE-2021-37666

TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can cause undefined behavior via binding a reference to null pointer in tf.rawops.RaggedTensorToVariant. The implementation has an incomplete validation of the splits values, missing the case...

CVE-2021-37666

CVE-2021-37666 is a TensorFlow vulnerability in RaggedTensorToVariant where binding a reference to a null pointer occurs due to incomplete validation of splits values. The issue is addressed by the GitHub patch be7a4de6adfbd303ce08be4332554dff70362612, with the fix scheduled for TensorFlow 2.6.0 ...

CVE-2021-37667

TensorFlow: CVE-2021-37667 involves a NULL pointer dereference in UnicodeEncode where the code reads input_splits[0] before validating emptiness. A patch is in commit 2e0ee46f..., fixes to be included in TensorFlow 2.6.0 and backported to 2.5.1, 2.4.3, and 2.3.4. Affected: tf.raw_ops.UnicodeEncod...

CVE-2021-37667 Reference binding to nullptr in unicode encoding in TensorFlow

TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can cause undefined behavior via binding a reference to null pointer in tf.rawops.UnicodeEncode. The implementation reads the first dimension of the inputsplits tensor before validating that th...

CVE-2021-37648

TensorFlow is an end-to-end open source platform for machine learning. In affected versions the code for tf.rawops.SaveV2 does not properly validate the inputs and an attacker can trigger a null pointer dereference. The implementation uses ValidateInputs to check that the input arguments are vali...

CVE-2021-37648

TensorFlow SaveV2 input validation flaw (tf.raw_ops.SaveV2) allows a local attacker to trigger a NULL pointer dereference due to improper input validation in ValidateInputs. The issue was fixed in TensorFlow 2.6.0 (commit 9728c60e...); backports were planned for 2.5.1, 2.4.3, and 2.3.4. Affected ...

CVE-2021-37648 Incorrect validation of `SaveV2` inputs in TensorFlow

TensorFlow is an end-to-end open source platform for machine learning. In affected versions the code for tf.rawops.SaveV2 does not properly validate the inputs and an attacker can trigger a null pointer dereference. The implementation uses ValidateInputs to check that the input arguments are vali...

CVE-2021-37652 Use after free in boosted trees creation in TensorFlow

TensorFlow is an end-to-end open source platform for machine learning. In affected versions the implementation for tf.rawops.BoostedTreesCreateEnsemble can result in a use after free error if an attacker supplies specially crafted arguments. The implementation uses a reference counted resource an...

CVE-2021-37652

TensorFlow Bug: BoostedTreesCreateEnsemble uses a reference-counted resource that was refactored to a smart pointer; when initialization fails, a later scope exit frees the resource even if its refcount is 0, causing a use-after-free. A patch (commit 5ecec9c6fbdbc6be03295685190a45e7eee726ab) fixe...