CVE-2021-29546

published 2021-05-14

CVE-2021-29546: TensorFlow is an end-to-end open source platform for machine learning. An attacker can trigger an integer division by zero undefined behavior in…

high 7.8 CVSS 3.1

AV L AC L PR L UI N S U C H I H A H

TensorFlow is an end-to-end open source platform for machine learning. An attacker can trigger an integer division by zero undefined behavior in `tf.raw_ops.QuantizedBiasAdd`. This is because the implementation of the Eigen kernel(https://github.com/tensorflow/tensorflow/blob/61bca8bd5ba8a68b2d97435ddfafcdf2b85672cd/tensorflow/core/kernels/quantization_utils.h#L812-L849) does a division by the number of elements of the smaller input (based on shape) without checking that this is not zero. The fix will be included in TensorFlow 2.5.0. We will also cherrypick this commit on TensorFlow 2.4.2, TensorFlow 2.3.3, TensorFlow 2.2.3 and TensorFlow 2.1.4, as these are also affected and still in supported range.

Affected

18 ranges

Vendor	Product	Version range	Fixed in
debian	tensorflow	—	—
google	tensorflow	< 2.1.4	2.1.4
google	tensorflow	>= 2.2.0 < 2.2.3	2.2.3
google	tensorflow	>= 2.3.0 < 2.3.3	2.3.3
google	tensorflow	>= 2.4.0 < 2.4.2	2.4.2
intel	optimization_for_tensorflow	>= 0 < 2.1.4	2.1.4
intel	optimization_for_tensorflow	>= 0 < 67784700869470d65d5f2ef20aeb5e97c31673cb	67784700869470d65d5f2ef20aeb5e97c31673cb
intel	optimization_for_tensorflow	>= 0 < 2.2.0rc0	2.2.0rc0
intel	optimization_for_tensorflow	>= 2.2.0 < 2.2.3	2.2.3
intel	optimization_for_tensorflow	>= 2.2.0 < 2.3.0rc0	2.3.0rc0
intel	optimization_for_tensorflow	>= 2.3.0 < 2.3.3	2.3.3
intel	optimization_for_tensorflow	>= 2.3.0 < 2.3.4	2.3.4
intel	optimization_for_tensorflow	>= 2.4.0 < 2.4.2	2.4.2
intel	optimization_for_tensorflow	>= 2.4.0 < 2.4.3	2.4.3
tensorflow	tensorflow	< 2.1.4	2.1.4
tensorflow	tensorflow	—	—
tensorflow	tensorflow	—	—
tensorflow	tensorflow	—	—

CWE-369