CVEvulnerability
CVE-2021-29546
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2021-05-14
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 2.5 LOW — CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L
- CVSS 3.1 ([email protected])
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 4.6 MEDIUM — AV:L/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-369
Description
TensorFlow is an end-to-end open source platform for machine learning. An attacker can trigger an integer division by zero undefined behavior in `tf.raw_ops.QuantizedBiasAdd`. This is because the implementation of the Eigen kernel(https://github.com/tensorflow/tensorflow/blob/61bca8bd5ba8a68b2d97435ddfafcdf2b85672cd/tensorflow/core/kernels/quantization_utils.h#L812-L849) does a division by the number of elements of the smaller input (based on shape) without checking that this is not zero. The fix will be included in TensorFlow 2.5.0. We will also cherrypick this commit on TensorFlow 2.4.2, TensorFlow 2.3.3, TensorFlow 2.2.3 and TensorFlow 2.1.4, as these are also affected and still in supported range.
Affected configurations
• google tensorflow (< 2.1.4)
• google tensorflow (>= 2.2.0 < 2.2.3)
• google tensorflow (>= 2.3.0 < 2.3.3)
• google tensorflow (>= 2.4.0 < 2.4.2)
Related
Weakness · CWE (1)
- CWE-369 Divide By Zero weakness
References
- https://github.com/tensorflow/tensorflow/commit/67784700869470d65d5f2ef20aeb5e97c31673cb Patch, Third Party Advisory
- https://github.com/tensorflow/tensorflow/security/advisories/GHSA-m34j-p8rj-wjxq Exploit, Patch, Third Party Advisory
- https://github.com/tensorflow/tensorflow/commit/67784700869470d65d5f2ef20aeb5e97c31673cb Patch, Third Party Advisory
- https://github.com/tensorflow/tensorflow/security/advisories/GHSA-m34j-p8rj-wjxq Exploit, Patch, Third Party Advisory