CVE-2021-41201

TensorFlow is an open source platform for machine learning. In affeced versions during execution, EinsumHelper::ParseEquation is supposed to set the flags in inputhasellipsis vector and outputhasellipsis boolean to indicate whether there is ellipsis in the corresponding inputs and output. However...

CVE-2021-41201

TensorFlow CVE-2021-41201: The issue is an uninitialized flag in EinsumHelper::ParseEquation that only ever sets input_has_ellipsis/output_has_ellipsis to true, leaving potential uninitialized access when callers expect both true/false values. This affects multiple TF releases (2.4.x–2.7.x) and i...

CVE-2021-41201 Unitialized access in `EinsumHelper::ParseEquation`

TensorFlow is an open source platform for machine learning. In affeced versions during execution, EinsumHelper::ParseEquation is supposed to set the flags in inputhasellipsis vector and outputhasellipsis boolean to indicate whether there is ellipsis in the corresponding inputs and output. However...