PT-2020-14280 · Google+1 · Tensorflow+1

Published 2020-09-25 · Updated 2024-03-06 · CVE-2020-15209

Positive Technologies (AI Summary)

CVSS v4.0

8.2

High

Base vector

AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions TensorFlow versions prior to 1.15.4 TensorFlow versions prior to 2.0.3 TensorFlow versions prior to 2.1.2 TensorFlow versions prior to 2.2.1 TensorFlow versions prior to 2.3.1

Description A crafted TFLite model can force a node to have as input a tensor backed by a nullptr buffer. This can be achieved by changing a buffer index in the flatbuffer serialization to convert a read-only tensor to a read-write one. The runtime assumes that these buffers are written to before a possible read, hence they are initialized with nullptr. However, by changing the buffer index for a tensor and implicitly converting that tensor to be a read-write one, as there is nothing in the model that writes to it, we get a null pointer dereference.

Recommendations Upgrade to TensorFlow 1.15.4 Upgrade to TensorFlow 2.0.3 Upgrade to TensorFlow 2.1.2 Upgrade to TensorFlow 2.2.1 Upgrade to TensorFlow 2.3.1

Exploit

Fix

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

BIT-TENSORFLOW-2020-15209

CVE-2020-15209

GHSA-QH32-6JJC-QPRM

OPENSUSE-SU-2020:1766-1

OPENSUSE-SU-2020_1766-1

OPENSUSE-SU-2024:12116-1

PYSEC-2020-132

PYSEC-2020-289

PYSEC-2020-324

Affected Products

Suse

Tensorflow

References · 37

• 🔥 https://github.com/tensorflow/tensorflow/security/advisories/GHSA-qh32-6jjc-qprm · Exploit
• https://github.com/tensorflow/tensorflow/commit/0b5662bc2be13a8c8f044d925d87fb6e56247cd8 · Patch
• https://osv.dev/vulnerability/PYSEC-2020-324 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-qh32-6jjc-qprm · Vendor Advisory
• https://osv.dev/vulnerability/BIT-tensorflow-2020-15209 · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2020-289 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2020:1766-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-15209 · Security Note
• https://osv.dev/vulnerability/CVE-2020-15209 · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2020-132 · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00065.html · Vendor Advisory
• https://github.com/tensorflow/tensorflow/releases/tag/v2.3.1 · Note
• https://github.com/tensorflow/tensorflow · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2020-324.yaml · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2020-289.yaml · Note