CVE-2021-41206: TensorFlow operations missing tensor shape validation allow crashes

Summary

TensorFlow operations in affected versions lack validation of the shapes of their tensor arguments. Depending on the API, this can cause undefined behavior, segfaults, or CHECK-fail crashes, and in some scenarios reads and writes to heap-populated arrays. The issues were found internally through tooling while testing GPU op determinism, and no reproducers exist.

Mitigation

Fixes will be included in TensorFlow 2.7.0. The commits will also be cherry-picked onto TensorFlow 2.6.1, TensorFlow 2.5.2, and TensorFlow 2.4.4, which are affected and still in supported range.

Affected packages in the Exposure Registry

Matched by package name and ecosystem. Each entry shows whether the package delegates to a language model and how many tracked packages depend on it.

• tensorflowPyPINo LLM dependency detected · 26 tracked dependents
• tensorflow-gpuPyPINo LLM dependency detected · 2 tracked dependents

Related items

• LowCloakFEM: Agentic FEM Code Generation for Red-Teaming Computational Resource ExhaustionSimilar attack · Arxiv (cs.CR + cs.CL + cs.LG)
• MediumThe Rise of LLMJacking: How Threat Actors Monetize Compromised Cloud and Model ResourcesSimilar attack · Google Threat Intelligence
• InfoThe Blind Spots of Detection: Adversarial Perturbation Attacks against Watchdogs in Distributed LLM InferenceSimilar attack · Arxiv (cs.CR + cs.CL + cs.LG)
• HighCVE-2026-118761: Kubeflow Pipelines decompression bomb in pipeline archive uploadSimilar attack · NVD/CVE Database
• LowOpenCode User Hit with Hostile Backlash After Reporting Free AI LoopholeSimilar attack · Socket Blog