CVE-2021-29552

TensorFlow is an end-to-end open source platform for machine learning. An attacker can cause a denial of service by controlling the values of numsegments tensor argument for UnsortedSegmentJoin. This is because the...

CVE-2021-29552

TensorFlow vulnerability CVE-2021-29552 is a denial-of-service in UnsortedSegmentJoin caused by an out-of-bounds CHECK on an empty num_segments scalar. Affected TF versions include those in the 2.1.x–2.5.x range; the issue stems from treating num_segments as a valid scalar and failing when the te...