CVEvulnerability
CVE-2021-41200
5.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2021-11-05
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- CVSS 3.1 ([email protected])
- 5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- CVSS 2.0 ([email protected])
- 2.1 LOW — AV:L/AC:L/Au:N/C:N/I:N/A:P
- Weaknesses
- CWE-617
Description
TensorFlow is an open source platform for machine learning. In affected versions if `tf.summary.create_file_writer` is called with non-scalar arguments code crashes due to a `CHECK`-fail. The fix will be included in TensorFlow 2.7.0. We will also cherrypick this commit on TensorFlow 2.6.1, TensorFlow 2.5.2, and TensorFlow 2.4.4, as these are also affected and still in supported range.
Affected configurations
• google tensorflow (< 2.4.4)
• google tensorflow (>= 2.5.0 < 2.5.2)
• google tensorflow 2.6.0
Related
Weakness · CWE (1)
- CWE-617 Reachable Assertion weakness
References
- https://github.com/tensorflow/tensorflow/commit/874bda09e6702cd50bac90b453b50bcc65b2769e Patch, Third Party Advisory
- https://github.com/tensorflow/tensorflow/issues/46909 Exploit, Third Party Advisory
- https://github.com/tensorflow/tensorflow/security/advisories/GHSA-gh8h-7j2j-qv4f Exploit, Third Party Advisory
- https://github.com/tensorflow/tensorflow/commit/874bda09e6702cd50bac90b453b50bcc65b2769e Patch, Third Party Advisory
- https://github.com/tensorflow/tensorflow/issues/46909 Exploit, Third Party Advisory
- https://github.com/tensorflow/tensorflow/security/advisories/GHSA-gh8h-7j2j-qv4f Exploit, Third Party Advisory