PT-2021-21760 · Google · Tensorflow

Published 2021-08-12 · Updated 2024-03-06 · CVE-2021-37645

Positive Technologies (AI Summary)

CVSS v4.0

5.7

Medium

Base vector

AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions TensorFlow versions prior to 2.6.0 TensorFlow version 2.5.1 TensorFlow version 2.4.3

Description The implementation of tf.raw ops.QuantizeAndDequantizeV4Grad is vulnerable to an integer overflow issue caused by converting a signed integer value to an unsigned one and then allocating memory based on this value. The issue arises when the axis value is used as the size argument to absl::InlinedVector constructor, which uses an unsigned type for the argument, transforming negative values to large integers.

Recommendations For TensorFlow versions prior to 2.6.0, update to version 2.6.0 or later to resolve the issue. For TensorFlow version 2.5.1, apply the patch from GitHub commit 96f364a1ca3009f98980021c4b32be5fdcca33a1. For TensorFlow version 2.4.3, apply the patch from GitHub commit 96f364a1ca3009f98980021c4b32be5fdcca33a1. As a temporary workaround, consider restricting the use of the tf.raw ops.QuantizeAndDequantizeV4Grad function until a patch is available.

Fix

Weakness Enumeration

CWE-681

Related Identifiers

BIT-TENSORFLOW-2021-37645

CVE-2021-37645

GHSA-9W2P-5MGW-P94C

OPENSUSE-SU-2022:10014-1

OPENSUSE-SU-2024:12116-1

PYSEC-2021-267

PYSEC-2021-558

PYSEC-2021-756

Affected Products

Tensorflow

References · 87

• https://github.com/tensorflow/tensorflow/commit/96f364a1ca3009f98980021c4b32be5fdcca33a1 · Patch
• https://osv.dev/vulnerability/openSUSE-SU-2022:10014-1 · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2021-558 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-37645 · Security Note
• https://osv.dev/vulnerability/PYSEC-2021-756 · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2021-267 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-9w2p-5mgw-p94c · Vendor Advisory
• https://osv.dev/vulnerability/BIT-tensorflow-2021-37645 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-37645 · Vendor Advisory
• https://github.com/tensorflow/tensorflow/security/advisories/GHSA-9w2p-5mgw-p94c · Note
• https://github.com/tensorflow/tensorflow · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-558.yaml · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-756.yaml · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-267.yaml · Note
• https://suse.com/security/cve/CVE-2021-37656 · Note