Skip to content
AI Sec Watch
MediumVulnerability

CVE-2021-29571: TensorFlow out-of-bounds read in tf.raw_ops.MaxPoolGradWithArgmax

Source
NVD(opens in a new tab)
Identifier
CVE-2021-29571
Published
Record updated
View JSON
Affected
  • tensorflow < 2.1.4, fixed in 2.1.4, released June 15, 2021, 31 days after disclosure
  • tensorflow >= 2.2.0, < 2.2.3, fixed in 2.2.3, released June 15, 2021, 31 days after disclosure
  • tensorflow >= 2.3.0, < 2.3.3, fixed in 2.3.3, released June 15, 2021, 31 days after disclosure
  • and 9 more
Known exploitation
Not listed in the CISA Known Exploited Vulnerabilities catalog at the last check.
EPSS
0.2%

Summary

TensorFlow's implementation of `tf.raw_ops.MaxPoolGradWithArgmax` can read outside the bounds of heap-allocated data when an attacker supplies specially crafted inputs. The draw bounding box kernel assumes the last dimension of the `boxes` input is 4, and this is not checked, so inputs with fewer than 4 values let attackers write outside heap-allocated objects and corrupt memory.

Mitigation

The fix will be included in TensorFlow 2.5.0. The commit will also be cherry-picked to TensorFlow 2.4.2, 2.3.3, 2.2.3 and 2.1.4, which are also affected and still in supported range.

Affected packages in the Exposure Registry

Matched by package name and ecosystem. Each entry shows whether the package delegates to a language model and how many tracked packages depend on it.

Related items