CVEvulnerability
CVE-2021-29587
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2021-05-14
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 2.5 LOW — CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L
- CVSS 3.1 ([email protected])
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 4.6 MEDIUM — AV:L/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-369
Description
TensorFlow is an end-to-end open source platform for machine learning. The `Prepare` step of the `SpaceToDepth` TFLite operator does not check for 0 before division(https://github.com/tensorflow/tensorflow/blob/5f7975d09eac0f10ed8a17dbb6f5964977725adc/tensorflow/lite/kernels/space_to_depth.cc#L63-L67). An attacker can craft a model such that `params->block_size` would be zero. The fix will be included in TensorFlow 2.5.0. We will also cherrypick this commit on TensorFlow 2.4.2, TensorFlow 2.3.3, TensorFlow 2.2.3 and TensorFlow 2.1.4, as these are also affected and still in supported range.
Affected configurations
• google tensorflow (< 2.1.4)
• google tensorflow (>= 2.2.0 < 2.2.3)
• google tensorflow (>= 2.3.0 < 2.3.3)
• google tensorflow (>= 2.4.0 < 2.4.2)
Related
Weakness · CWE (1)
- CWE-369 Divide By Zero weakness
References
- https://github.com/tensorflow/tensorflow/commit/0d45ea1ca641b21b73bcf9c00e0179cda284e7e7 Patch, Third Party Advisory
- https://github.com/tensorflow/tensorflow/security/advisories/GHSA-j7rm-8ww4-xx2g Exploit, Patch, Third Party Advisory
- https://github.com/tensorflow/tensorflow/commit/0d45ea1ca641b21b73bcf9c00e0179cda284e7e7 Patch, Third Party Advisory
- https://github.com/tensorflow/tensorflow/security/advisories/GHSA-j7rm-8ww4-xx2g Exploit, Patch, Third Party Advisory