GitHub Advisoryadvisory · PyPI

GHSA-xwhf-g6j5-j5gc Float cast overflow undefined behavior

MEDIUM Published 2020-11-13 Modified 2024-10-28 Official page ↗
Aliases
CVE-2020-15266
Ecosystem
PyPI
Packages
tensorflow, tensorflow-cpu, tensorflow-gpu
Severity
Moderate
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
Weaknesses
CWE-119
Reviewed
2020-11-13

Affected packages

• PyPI tensorflow: < 2.4.0 → fixed in 2.4.0 • PyPI tensorflow-cpu: < 2.4.0 → fixed in 2.4.0 • PyPI tensorflow-gpu: < 2.4.0 → fixed in 2.4.0

Description

Impact When the `boxes` argument of `tf.image.crop_and_resize` has a very large value, the CPU kernel implementation receives it as a C++ `nan` floating point value. Attempting to operate on this is undefined behavior which later produces a segmentation fault. Patches We have patched the issue in c0319231333f0f16e1cc75ec83660b01fedd4182 and will release TensorFlow 2.4.0 containing the patch. TensorFlow nightly packages after this commit will also have the issue resolved. For more information Please consult our security guide for more information regarding the security model and how to contact us with issues and questions. Attribution This vulnerability has been reported in #42129

Related

Alias · CVE (1)

  • CVE-2020-15266 In Tensorflow before version 2.4.0, when the `boxes` argument of `tf.image.crop_and_resize` has a very large value, the CPU kernel… vulnerability

Weakness · CWE (1)

  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness

References