PT-2021-18354 · Google · Tensorflow

Mihaimaruseac · Published 2021-05-14 · Updated 2024-03-06 · CVE-2021-29603

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions TensorFlow versions prior to 2.5.0 TensorFlow versions 2.4.2 and earlier TensorFlow versions 2.3.3 and earlier TensorFlow versions 2.2.3 and earlier TensorFlow versions 2.1.4 and earlier

Description A specially crafted TFLite model could trigger an out-of-bounds write on the heap in the TFLite implementation of ArgMin/ArgMax. If the axis value is not a value between 0 and NumDimensions(input), then the condition in the if statement is never true, so the code writes past the last valid element of output dims->data.

Recommendations For versions prior to 2.5.0, update to TensorFlow 2.5.0 or later. For versions 2.4.2 and earlier, update to TensorFlow 2.4.2 or later. For versions 2.3.3 and earlier, update to TensorFlow 2.3.3 or later. For versions 2.2.3 and earlier, update to TensorFlow 2.2.3 or later. For versions 2.1.4 and earlier, update to TensorFlow 2.1.4 or later. As a temporary workaround, consider restricting the use of the ArgMin/ArgMax functions until a patch is available.

Exploit

Fix

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

BIT-TENSORFLOW-2021-29603

CVE-2021-29603

GHSA-CRCH-J389-5F84

PYSEC-2021-240

PYSEC-2021-531

PYSEC-2021-729

Affected Products

Tensorflow

References · 14

• 🔥 https://github.com/tensorflow/tensorflow/security/advisories/GHSA-crch-j389-5f84 · Exploit
• https://github.com/tensorflow/tensorflow/commit/c59c37e7b2d563967da813fa50fe20b21f4da683 · Patch
• https://osv.dev/vulnerability/PYSEC-2021-240 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-crch-j389-5f84 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-29603 · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2021-729 · Vendor Advisory
• https://osv.dev/vulnerability/BIT-tensorflow-2021-29603 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-29603 · Security Note
• https://osv.dev/vulnerability/PYSEC-2021-531 · Vendor Advisory
• https://github.com/tensorflow/tensorflow/blob/102b211d892f3abc14f845a72047809b39cc65ab/tensorflow/lite/kernels/arg_min_max.cc#L52-L59 · Note
• https://github.com/tensorflow/tensorflow · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-729.yaml · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-531.yaml · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-240.yaml · Note