CVE-2021-29604

published 2021-05-14

CVE-2021-29604: TensorFlow is an end-to-end open source platform for machine learning. The TFLite implementation of hashtable lookup is vulnerable to a division by zero…

Priority P4 20 medium 5.5 CVSS 3.1

AV L AC L PR L UI N S U C N I N A H

TensorFlow is an end-to-end open source platform for machine learning. The TFLite implementation of hashtable lookup is vulnerable to a division by zero error(https://github.com/tensorflow/tensorflow/blob/1a8e885b864c818198a5b2c0cbbeca5a1e833bc8/tensorflow/lite/kernels/hashtable_lookup.cc#L114-L115) An attacker can craft a model such that `values`'s first dimension would be 0. The fix will be included in TensorFlow 2.5.0. We will also cherrypick this commit on TensorFlow 2.4.2, TensorFlow 2.3.3, TensorFlow 2.2.3 and TensorFlow 2.1.4, as these are also affected and still in supported range.

Affected

14 ranges

Vendor	Product	Version range	Fixed in
debian	tensorflow	—	—
google	tensorflow	< 2.1.4	2.1.4
google	tensorflow	>= 2.2.0 < 2.2.3	2.2.3
google	tensorflow	>= 2.3.0 < 2.3.3	2.3.3
google	tensorflow	>= 2.4.0 < 2.4.2	2.4.2
intel	optimization_for_tensorflow	>= 0 < 2.1.4	2.1.4
intel	optimization_for_tensorflow	>= 0 < 5117e0851348065ed59c991562c0ec80d9193db2	5117e0851348065ed59c991562c0ec80d9193db2
intel	optimization_for_tensorflow	>= 2.2.0 < 2.2.3	2.2.3
intel	optimization_for_tensorflow	>= 2.3.0 < 2.3.3	2.3.3
intel	optimization_for_tensorflow	>= 2.4.0 < 2.4.2	2.4.2
tensorflow	tensorflow	< 2.1.4	2.1.4
tensorflow	tensorflow	—	—
tensorflow	tensorflow	—	—
tensorflow	tensorflow	—	—

CVSS provenance

nvd v3.1 5.5 MEDIUM CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

nvd v2.0 2.1 LOW AV:L/AC:L/Au:N/C:N/I:N/A:P

vendor_debian 2.5 LOW

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-369