TensorFlow is an open source platform for machine learning. In affected versions during TensorFlow's Grappler optimizer phase, constant folding might attempt to deep copy a resource tensor. This results in a segfault, as these tensors are supposed to not change. The fix will be included in TensorFlow 2.7.0. We will also cherrypick this commit on TensorFlow 2.6.1, TensorFlow 2.5.2, and TensorFlow 2.4.4, as these are also affected and still in supported range.
References
Link | Resource |
---|---|
https://github.com/tensorflow/tensorflow/commit/7731e8dfbe4a56773be5dc94d631611211156659 | Third Party Advisory |
https://github.com/tensorflow/tensorflow/security/advisories/GHSA-786j-5qwq-r36x | Third Party Advisory |
https://github.com/tensorflow/tensorflow/commit/7731e8dfbe4a56773be5dc94d631611211156659 | Third Party Advisory |
https://github.com/tensorflow/tensorflow/security/advisories/GHSA-786j-5qwq-r36x | Third Party Advisory |
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 06:25
Type | Values Removed | Values Added |
---|---|---|
References | () https://github.com/tensorflow/tensorflow/commit/7731e8dfbe4a56773be5dc94d631611211156659 - Third Party Advisory | |
References | () https://github.com/tensorflow/tensorflow/security/advisories/GHSA-786j-5qwq-r36x - Third Party Advisory |
Information
Published : 2021-11-05 21:15
Updated : 2024-11-21 06:25
NVD link : CVE-2021-41204
Mitre link : CVE-2021-41204
CVE.ORG link : CVE-2021-41204
JSON object : View
Products Affected
- tensorflow
CWE
CWE-824
Access of Uninitialized Pointer