PT-2021-18348 · Google · Tensorflow

Published

2021-05-14

·

Updated

2024-03-06

·

CVE-2021-29597

CVSS v3.1

7.8

High

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions TensorFlow versions prior to 2.5.0 TensorFlow versions 2.4.2, 2.3.3, 2.2.3, and 2.1.4 are also affected
Description The implementation of the SpaceToBatchNd TFLite operator is vulnerable to a division by zero error. An attacker can craft a model such that one dimension of the block input is 0, resulting in a corresponding value of 0 in block shape. This can lead to a division by zero error in the TF LITE ENSURE EQ function.
Recommendations For TensorFlow versions prior to 2.5.0, update to version 2.5.0 or later to resolve the issue. For TensorFlow version 2.4.2, update to a newer version that includes the fix, such as 2.5.0. For TensorFlow version 2.3.3, update to a newer version that includes the fix, such as 2.5.0. For TensorFlow version 2.2.3, update to a newer version that includes the fix, such as 2.5.0. For TensorFlow version 2.1.4, update to a newer version that includes the fix, such as 2.5.0. As a temporary workaround, consider restricting the use of the SpaceToBatchNd TFLite operator until a patch is available.

Exploit

Fix

Divide By Zero

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

BIT-TENSORFLOW-2021-29597
CVE-2021-29597
GHSA-V52P-HFJF-WG88
PYSEC-2021-234
PYSEC-2021-525
PYSEC-2021-723

Affected Products

Tensorflow