{"data":{"id":"e32c72bb-9288-4abe-8137-1a1a464ac11e","title":"CVE-2021-37642: TensorFlow is an end-to-end open source platform for machine learning. In affected versions the implementation of…","summary":"TensorFlow's implementation of `tf.raw_ops.ResourceScatterDiv` in affected versions is vulnerable to a division by 0 error. The implementation uses a common class for all binary operations but does not handle the division by 0 case separately.","solution":"The issue is patched in GitHub commit 4aacb30888638da75023e6601149415b39763d76. The fix will be included in TensorFlow 2.6.0, and the commit will also be cherrypicked to TensorFlow 2.5.1, TensorFlow 2.4.3, and TensorFlow 2.3.4.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2021-37642","publishedAt":"2021-08-12T22:15:10.633Z","cveId":"CVE-2021-37642","cweIds":["CWE-369"],"cvssScore":"5.5","cvssSeverity":"medium","severity":"medium","attackType":["denial_of_service"],"issueType":"vulnerability","affectedPackages":["tensorflow@< 2.3.4 (fixed: 2.3.4)","tensorflow@>= 2.4.0, < 2.4.3 (fixed: 2.4.3)","tensorflow@= 2.5.0 (fixed: 2.5.1)","tensorflow-cpu@< 2.3.4 (fixed: 2.3.4)","tensorflow-cpu@>= 2.4.0, < 2.4.3 (fixed: 2.4.3)","tensorflow-cpu@= 2.5.0 (fixed: 2.5.1)","tensorflow-gpu@< 2.3.4 (fixed: 2.3.4)","tensorflow-gpu@>= 2.4.0, < 2.4.3 (fixed: 2.4.3)","tensorflow-gpu@= 2.5.0 (fixed: 2.5.1)"],"affectedPackageNames":["tensorflow","tensorflow-cpu","tensorflow-gpu"],"affectedPackageRefs":["pypi:tensorflow","pypi:tensorflow-cpu","pypi:tensorflow-gpu"],"affectedVendors":[],"affectedVendorsRaw":["TensorFlow"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"TensorFlow division by zero in tf.raw_ops.ResourceScatterDiv","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00154,"epssCheckedAt":"2026-11-04T18:09:14.469Z","kevDateAdded":null,"advisoryAliases":["GHSA-ch4f-829c-v5pw"],"affectedPackagesSource":"ghsa","affectedPackagesCheckedAt":"2026-10-10T03:59:47.615Z","patchAvailable":true,"disclosureDate":null,"fixReleasedAt":"2021-08-10T21:51:35.142Z","daysToFix":-2,"fixCheckedAt":"2026-10-29T21:50:58.436Z","capecIds":null,"crossRefCount":0,"attackSophistication":"trivial","impactType":["availability"],"aiComponentTargeted":"framework","llmSpecific":false,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":null,"fixes":[{"ecosystem":"pypi","name":"tensorflow-cpu","fixedVersion":"2.4.3","matchedVersion":"2.4.3","fixReleasedAt":"2021-08-10T21:53:37.078Z","daysToFix":-2,"match":"ecosystem","source":"registry","status":"found","checkedAt":"2026-10-29T21:50:58.285Z"},{"ecosystem":"pypi","name":"tensorflow","fixedVersion":"2.3.4","matchedVersion":"2.3.4","fixReleasedAt":"2021-08-10T21:51:35.142Z","daysToFix":-2,"match":"ecosystem","source":"tracked","status":"found","checkedAt":"2026-10-29T21:50:58.285Z"},{"ecosystem":"pypi","name":"tensorflow-gpu","fixedVersion":"2.3.4","matchedVersion":"2.3.4","fixReleasedAt":"2021-08-10T21:54:46.058Z","daysToFix":-2,"match":"ecosystem","source":"registry","status":"found","checkedAt":"2026-10-29T21:50:58.285Z"},{"ecosystem":"pypi","name":"tensorflow","fixedVersion":"2.4.3","matchedVersion":"2.4.3","fixReleasedAt":"2021-08-10T21:52:30.867Z","daysToFix":-2,"match":"ecosystem","source":"tracked","status":"found","checkedAt":"2026-10-29T21:50:58.285Z"},{"ecosystem":"pypi","name":"tensorflow-gpu","fixedVersion":"2.5.1","matchedVersion":"2.5.1","fixReleasedAt":"2021-08-10T21:58:54.547Z","daysToFix":-2,"match":"ecosystem","source":"registry","status":"found","checkedAt":"2026-10-29T21:50:58.285Z"},{"ecosystem":"pypi","name":"tensorflow-cpu","fixedVersion":"2.3.4","matchedVersion":"2.3.4","fixReleasedAt":"2021-08-10T21:52:20.445Z","daysToFix":-2,"match":"ecosystem","source":"registry","status":"found","checkedAt":"2026-10-29T21:50:58.285Z"},{"ecosystem":"pypi","name":"tensorflow-cpu","fixedVersion":"2.5.1","matchedVersion":"2.5.1","fixReleasedAt":"2021-08-10T21:53:19.960Z","daysToFix":-2,"match":"ecosystem","source":"registry","status":"found","checkedAt":"2026-10-29T21:50:58.285Z"},{"ecosystem":"pypi","name":"tensorflow","fixedVersion":"2.5.1","matchedVersion":"2.5.1","fixReleasedAt":"2021-08-10T21:51:57.218Z","daysToFix":-2,"match":"ecosystem","source":"tracked","status":"found","checkedAt":"2026-10-29T21:50:58.285Z"},{"ecosystem":"pypi","name":"tensorflow-gpu","fixedVersion":"2.4.3","matchedVersion":"2.4.3","fixReleasedAt":"2021-08-10T21:57:52.135Z","daysToFix":-2,"match":"ecosystem","source":"registry","status":"found","checkedAt":"2026-10-29T21:50:58.285Z"}]}}