LowVulnerability
CVE-2021-29562: TensorFlow denial of service via CHECK failure in tf.raw_ops.IRFFT
- Source
- NVD(opens in a new tab)
- Identifier
- CVE-2021-29562
- Published
- Record updated
- Affected
- tensorflow < 2.1.4, fixed in 2.1.4
- tensorflow >= 2.2.0, < 2.2.3, fixed in 2.2.3
- tensorflow >= 2.3.0, < 2.3.3, fixed in 2.3.3
- and 9 more
- Known exploitation
- Not listed in the CISA Known Exploited Vulnerabilities catalog at the last check.
- EPSS
- 0.2%
Summary
CVE-2021-29562 is a denial-of-service flaw in TensorFlow, caused by a CHECK-failure in the implementation of tf.raw_ops.IRFFT. An attacker can trigger it to crash the process. The source lists TensorFlow 2.4.2, 2.3.3, 2.2.3 and 2.1.4 as also affected, in addition to the main release line.
Mitigation
The fix will be included in TensorFlow 2.5.0. The commit will also be cherry-picked to TensorFlow 2.4.2, 2.3.3, 2.2.3 and 2.1.4.
Related items
- CriticalCVE-2026-90970: GitLab AI Gateway prompt template sandbox escape via crafted flow configurationSame vendor · NVD/CVE Database
- MediumCVE-2026-89278: GPTranslate WordPress plugin exposes plaintext API key to unauthenticated usersSame vendor · NVD/CVE Database
- CriticalCVE-2026-19407: Google Cloud Gemini Enterprise Agent Platform SDK for Python bucket squattingSame vendor · NVD/CVE Database
- HighCVE-2026-19486: A Server-Side Request Forgery (SSRF) vulnerability in Google Cloud Gemini Enterprise Agent Platform App Builder…Same vendor · NVD/CVE Database
- HighCVE-2026-13745: Gemini CLI code execution via untrusted .env files overriding GEMINI_CLI_HOMESame vendor · NVD/CVE Database