Intel Optimization For Tensorflow vulnerabilities

CVE-2021-29547 [LOW] CWE-125 Heap out of bounds in `QuantizedBatchNormWithGlobalNormalization` Heap out of bounds in `QuantizedBatchNormWithGlobalNormalization` ### Impact An attacker can cause a segfault and denial of service via accessing data outside of bounds in `tf.raw_ops.QuantizedBatchNormWithGlobalNormalization`: ```python import tensorflow as tf t = tf.constant([1], shape=[1, 1, 1, 1], dtype=tf.quint8) t_min = tf.constant([], shape=[0], dtype=tf.float32) t_max = tf.constant([], shape

CVE-2021-41217 [MEDIUM] CWE-476 Null pointer exception when `Exit` node is not preceded by `Enter` op Null pointer exception when `Exit` node is not preceded by `Enter` op ### Impact The [process of building the control flow graph](https://github.com/tensorflow/tensorflow/blob/8d72537c6abf5a44103b57b9c2e22c14f5f49698/tensorflow/core/common_runtime/immutable_executor_state.cc#L284-L346) for a TensorFlow model is vulnerable to a null pointer exception when nodes that should be paired are not: ``

CVE-2021-37669 [MEDIUM] CWE-681 Crash in NMS ops caused by integer conversion to unsigned Crash in NMS ops caused by integer conversion to unsigned ### Impact An attacker can cause denial of service in applications serving models using `tf.raw_ops.NonMaxSuppressionV5` by triggering a division by 0: ```python import tensorflow as tf tf.raw_ops.NonMaxSuppressionV5( boxes=[[0.1,0.1,0.1,0.1],[0.2,0.2,0.2,0.2],[0.3,0.3,0.3,0.3]], scores=[1.0,2.0,3.0], max_output_size=-1, iou_threshold=0.5, score_t

CVE-2021-37692 [MEDIUM] CWE-20 Segfault on strings tensors with mistmatched dimensions, due to Go code Segfault on strings tensors with mistmatched dimensions, due to Go code ### Impact Under certain conditions, Go code can trigger a segfault in string deallocation. For string tensors, `C.TF_TString_Dealloc` is called during garbage collection within a finalizer function. However, tensor structure isn't checked until encoding to avoid a performance penalty. The current method for dealloc assu

CVE-2021-37675 [MEDIUM] CWE-369 Division by 0 in most convolution operators Division by 0 in most convolution operators ### Impact Most implementations of convolution operators in TensorFlow are affected by a division by 0 vulnerability where an attacker can trigger a denial of service via a crash: ```python import tensorflow as tf tf.compat.v1.disable_v2_behavior() tf.raw_ops.Conv2D( input = tf.constant([], shape=[0, 0, 0, 0], dtype=tf.float32), filter = tf.constant([], shape=[0, 0, 0, 0], d

CVE-2021-37660 [MEDIUM] CWE-369 Division by 0 in inplace operations Division by 0 in inplace operations ### Impact An attacker can cause a floating point exception by calling inplace operations with crafted arguments that would result in a division by 0: ```python import tensorflow as tf tf.raw_ops.InplaceSub(x=[],i=[-99,-1,-1],v=[1,1,1]) ``` The [implementation](https://github.com/tensorflow/tensorflow/blob/84d053187cb80d975ef2b9684d4b61981bca0c41/tensorflow/core/kernels/inplace_ops.cc#L283

CVE-2021-37646 [MEDIUM] CWE-681 Bad alloc in `StringNGrams` caused by integer conversion Bad alloc in `StringNGrams` caused by integer conversion ### Impact The implementation of `tf.raw_ops.StringNGrams` is vulnerable to an integer overflow issue caused by converting a signed integer value to an unsigned one and then allocating memory based on this value. ```python import tensorflow as tf tf.raw_ops.StringNGrams( data=['',''], data_splits=[0,2], separator=' '*100, ngram_widths=[-80,0,0,-60],

CVE-2021-37645 [MEDIUM] CWE-681 Integer overflow due to conversion to unsigned Integer overflow due to conversion to unsigned ### Impact The implementation of `tf.raw_ops.QuantizeAndDequantizeV4Grad` is vulnerable to an integer overflow issue caused by converting a signed integer value to an unsigned one and then allocating memory based on this value. ```python import tensorflow as tf tf.raw_ops.QuantizeAndDequantizeV4Grad( gradients=[1.0,2.0], input=[1.0,1.0], input_min=[0.0], input_max=[10.

CVE-2021-41218 [MEDIUM] CWE-369 Integer division by 0 in `tf.raw_ops.AllToAll` Integer division by 0 in `tf.raw_ops.AllToAll` ### Impact The [shape inference code for `AllToAll`](https://github.com/tensorflow/tensorflow/blob/8d72537c6abf5a44103b57b9c2e22c14f5f49698/tensorflow/core/ops/tpu_cross_replica_ops.cc#L25-L74) can be made to execute a division by 0: ```python import tensorflow as tf @tf.function def func(): return tf.raw_ops.AllToAll( input=[0.0, 0.1652, 0.6543], group_assignment=[1,

CVE-2022-29191 [MEDIUM] CWE-20 Missing validation causes denial of service via `GetSessionTensor` Missing validation causes denial of service via `GetSessionTensor` ### Impact The implementation of [`tf.raw_ops.GetSessionTensor`](https://github.com/tensorflow/tensorflow/blob/f3b9bf4c3c0597563b289c0512e98d4ce81f886e/tensorflow/core/kernels/session_ops.cc#L94-L112) does not fully validate the input arguments. This results in a `CHECK`-failure which can be used to trigger a denial of service attac

CVE-2022-29192 [MEDIUM] CWE-20 Missing validation crashes `QuantizeAndDequantizeV4Grad` Missing validation crashes `QuantizeAndDequantizeV4Grad` ### Impact The implementation of [`tf.raw_ops.QuantizeAndDequantizeV4Grad`](https://github.com/tensorflow/tensorflow/blob/f3b9bf4c3c0597563b289c0512e98d4ce81f886e/tensorflow/core/kernels/quantize_and_dequantize_op.cc#L148-L226) does not fully validate the input arguments. This results in a `CHECK`-failure which can be used to trigger a denial of servic

CVE-2022-29201 [MEDIUM] CWE-20 Missing validation results in undefined behavior in `QuantizedConv2D` Missing validation results in undefined behavior in `QuantizedConv2D` ### Impact The implementation of [`tf.raw_ops.QuantizedConv2D`](https://github.com/tensorflow/tensorflow/blob/f3b9bf4c3c0597563b289c0512e98d4ce81f886e/tensorflow/core/kernels/quantized_conv_ops.cc) does not fully validate the input arguments: ```python import tensorflow as tf input = tf.constant(1, shape=[1, 2, 3, 3], dtype=

CVE-2022-29194 [MEDIUM] CWE-20 Missing validation causes denial of service via `DeleteSessionTensor` Missing validation causes denial of service via `DeleteSessionTensor` ### Impact The implementation of [`tf.raw_ops.DeleteSessionTensor`](https://github.com/tensorflow/tensorflow/blob/f3b9bf4c3c0597563b289c0512e98d4ce81f886e/tensorflow/core/kernels/session_ops.cc#L128-L144) does not fully validate the input arguments. This results in a `CHECK`-failure which can be used to trigger a denial of ser

CVE-2022-29193 [MEDIUM] CWE-20 Missing validation causes `TensorSummaryV2` to crash Missing validation causes `TensorSummaryV2` to crash ### Impact The implementation of [`tf.raw_ops.TensorSummaryV2`](https://github.com/tensorflow/tensorflow/blob/f3b9bf4c3c0597563b289c0512e98d4ce81f886e/tensorflow/core/kernels/summary_tensor_op.cc#L33-L58) does not fully validate the input arguments. This results in a `CHECK`-failure which can be used to trigger a denial of service attack: ```python import num

CVE-2022-29202 [MEDIUM] CWE-1284 Denial of service in `tf.ragged.constant` due to lack of validation Denial of service in `tf.ragged.constant` due to lack of validation ### Impact The implementation of [`tf.ragged.constant`](https://github.com/tensorflow/tensorflow/blob/f3b9bf4c3c0597563b289c0512e98d4ce81f886e/tensorflow/python/ops/ragged/ragged_factory_ops.py#L146-L239) does not fully validate the input arguments. This results in a denial of service by consuming all available memory: ```pytho

CVE-2021-41196 [MEDIUM] CWE-191 Crash in `max_pool3d` when size argument is 0 or negative Crash in `max_pool3d` when size argument is 0 or negative ### Impact The Keras pooling layers can trigger a segfault if the size of the pool is 0 or if a dimension is negative: ```python import tensorflow as tf pool_size = [2, 2, 0] layer = tf.keras.layers.MaxPooling3D(strides=1, pool_size=pool_size) input_tensor = tf.random.uniform([3, 4, 10, 11, 12], dtype=tf.float32) res = layer(input_tensor) ``` Thi

CVE-2021-29618 [LOW] CWE-755 Crash in `tf.transpose` with complex inputs Crash in `tf.transpose` with complex inputs ### Impact Passing a complex argument to `tf.transpose` at the same time as passing `conjugate=True` argument results in a crash: ```python import tensorflow as tf tf.transpose(conjugate=True, a=complex(1)) ``` ### Patches We have received a patch for the issue in GitHub commit [1dc6a7ce6e0b3e27a7ae650bfc05b195ca793f88](https://github.com/tensorflow/tensorflow/commit/1dc6a7ce6e

CVE-2021-29605 [MEDIUM] CWE-190 Integer overflow in TFLite memory allocation Integer overflow in TFLite memory allocation ### Impact The TFLite code for allocating `TFLiteIntArray`s is [vulnerable to an integer overflow issue](https://github.com/tensorflow/tensorflow/blob/4ceffae632721e52bf3501b736e4fe9d1221cdfa/tensorflow/lite/c/common.c#L24-L27): ```cc int TfLiteIntArrayGetSizeInBytes(int size) { static TfLiteIntArray dummy; return sizeof(dummy) + sizeof(dummy.data[0]) * size; } ``` An atta

CVE-2021-29551 [LOW] CWE-125 OOB read in `MatrixTriangularSolve` OOB read in `MatrixTriangularSolve` ### Impact The implementation of [`MatrixTriangularSolve`](https://github.com/tensorflow/tensorflow/blob/8cae746d8449c7dda5298327353d68613f16e798/tensorflow/core/kernels/linalg/matrix_triangular_solve_op_impl.h#L160-L240) fails to terminate kernel execution if one validation condition fails: ```cc void ValidateInputTensors(OpKernelContext* ctx, const Tensor& in0, const Tensor& in1) override { O

CVE-2021-29615 [LOW] CWE-674 Stack overflow in `ParseAttrValue` with nested tensors Stack overflow in `ParseAttrValue` with nested tensors ### Impact The implementation of [`ParseAttrValue`](https://github.com/tensorflow/tensorflow/blob/c22d88d6ff33031aa113e48aa3fc9aa74ed79595/tensorflow/core/framework/attr_value_util.cc#L397-L453) can be tricked into stack overflow due to recursion by giving in a specially crafted input. ### Patches We have patched the issue in GitHub commit [e07e1c3d26492c06