PT-2021-18287 · Google · Tensorflow
Yakun Zhang
+1
·
Published
2021-05-14
·
Updated
2024-03-06
·
CVE-2021-29536
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions:
TensorFlow versions prior to 2.5.0
TensorFlow versions 2.4.2 and earlier
TensorFlow versions 2.3.3 and earlier
TensorFlow versions 2.2.3 and earlier
TensorFlow versions 2.1.4 and earlier
Description:
An attacker can cause a heap buffer overflow in
QuantizedReshape by passing in invalid thresholds for the quantization. This is because the implementation assumes that the 2 arguments are always valid scalars and tries to access the numeric value directly. However, if any of these tensors is empty, then .flat<T>() is an empty buffer and accessing the element at position 0 results in overflow.Recommendations:
For versions prior to 2.5.0, update to TensorFlow 2.5.0 or later.
For versions 2.4.2 and earlier, update to TensorFlow 2.4.2 or later.
For versions 2.3.3 and earlier, update to TensorFlow 2.3.3 or later.
For versions 2.2.3 and earlier, update to TensorFlow 2.2.3 or later.
For versions 2.1.4 and earlier, update to TensorFlow 2.1.4 or later.
As a temporary workaround, consider avoiding the use of
QuantizedReshape with empty tensors until a patch is available.Exploit
Fix
Memory Corruption
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Tensorflow