CVE-2021-29589

published 2021-05-14

CVE-2021-29589: TensorFlow is an end-to-end open source platform for machine learning. The reference implementation of the `GatherNd` TFLite operator is vulnerable to a…

high 7.8 CVSS 3.1

AV L AC L PR L UI N S U C H I H A H

TensorFlow is an end-to-end open source platform for machine learning. The reference implementation of the `GatherNd` TFLite operator is vulnerable to a division by zero error(https://github.com/tensorflow/tensorflow/blob/0d45ea1ca641b21b73bcf9c00e0179cda284e7e7/tensorflow/lite/kernels/internal/reference/reference_ops.h#L966). An attacker can craft a model such that `params` input would be an empty tensor. In turn, `params_shape.Dims(.)` would be zero, in at least one dimension. The fix will be included in TensorFlow 2.5.0. We will also cherrypick this commit on TensorFlow 2.4.2, TensorFlow 2.3.3, TensorFlow 2.2.3 and TensorFlow 2.1.4, as these are also affected and still in supported range.

Affected

18 ranges

Vendor	Product	Version range	Fixed in
debian	tensorflow	—	—
google	tensorflow	< 2.1.4	2.1.4
google	tensorflow	>= 2.2.0 < 2.2.3	2.2.3
google	tensorflow	>= 2.3.0 < 2.3.3	2.3.3
google	tensorflow	>= 2.4.0 < 2.4.2	2.4.2
intel	optimization_for_tensorflow	>= 0 < 8e45822aa0b9f5df4b4c64f221e64dc930a70a9d	8e45822aa0b9f5df4b4c64f221e64dc930a70a9d
intel	optimization_for_tensorflow	>= 0 < 2.2.0rc0	2.2.0rc0
intel	optimization_for_tensorflow	>= 0 < 2.1.4	2.1.4
intel	optimization_for_tensorflow	>= 2.2.0 < 2.3.0rc0	2.3.0rc0
intel	optimization_for_tensorflow	>= 2.2.0 < 2.2.3	2.2.3
intel	optimization_for_tensorflow	>= 2.3.0 < 2.3.4	2.3.4
intel	optimization_for_tensorflow	>= 2.3.0 < 2.3.3	2.3.3
intel	optimization_for_tensorflow	>= 2.4.0 < 2.4.3	2.4.3
intel	optimization_for_tensorflow	>= 2.4.0 < 2.4.2	2.4.2
tensorflow	tensorflow	< 2.1.4	2.1.4
tensorflow	tensorflow	—	—
tensorflow	tensorflow	—	—
tensorflow	tensorflow	—	—

CWE-369