PT-2021-21753 · Google · Tensorflow

Mihaimaruseac · Published 2021-08-12 · Updated 2024-03-06 · CVE-2021-37638

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions TensorFlow versions prior to 2.6.0 TensorFlow version 2.5.1 TensorFlow version 2.4.3 TensorFlow version 2.3.4

Description The issue arises when sending an invalid argument for row partition types of the tf.raw ops.RaggedTensorToTensor API, resulting in a null pointer dereference and undefined behavior. This occurs because the implementation accesses the first element of a user-supplied list of values without validating that the provided list is not empty.

Recommendations For TensorFlow versions prior to 2.6.0, update to version 2.6.0 or later. For TensorFlow version 2.5.1, apply the patch from GitHub commit 301ae88b331d37a2a16159b65b255f4f9eb39314 or update to a later version. For TensorFlow version 2.4.3, apply the patch from GitHub commit 301ae88b331d37a2a16159b65b255f4f9eb39314 or update to a later version. For TensorFlow version 2.3.4, apply the patch from GitHub commit 301ae88b331d37a2a16159b65b255f4f9eb39314 or update to a later version. As a temporary workaround, consider validating the row partition types list before passing it to the tf.raw ops.RaggedTensorToTensor API to prevent null pointer dereferences.

Fix

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

BIT-TENSORFLOW-2021-37638

CVE-2021-37638

GHSA-HWR7-8GXX-FJ5P

OPENSUSE-SU-2022:10014-1

OPENSUSE-SU-2024:12116-1

PYSEC-2021-260

PYSEC-2021-551

PYSEC-2021-749

Affected Products

Tensorflow

References · 86

• https://github.com/tensorflow/tensorflow/commit/301ae88b331d37a2a16159b65b255f4f9eb39314 · Patch
• https://osv.dev/vulnerability/openSUSE-SU-2022:10014-1 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-hwr7-8gxx-fj5p · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-37638 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-37638 · Security Note
• https://osv.dev/vulnerability/PYSEC-2021-749 · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2021-260 · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2021-551 · Vendor Advisory
• https://osv.dev/vulnerability/BIT-tensorflow-2021-37638 · Vendor Advisory
• https://github.com/tensorflow/tensorflow/security/advisories/GHSA-hwr7-8gxx-fj5p · Note
• https://github.com/tensorflow/tensorflow · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-749.yaml · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-260.yaml · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-551.yaml · Note
• https://suse.com/security/cve/CVE-2021-37656 · Note