CVE-2021-41226: Heap OOB read in `SparseBinCount`
Impact The implementation of SparseBinCount is vulnerable to a heap OOB:
python import tensorflow as tf tf.rawops.SparseBincount( indices=[[0],[1],[2]] values=[0,-10000000] denseshape=[1,1] size=[1] weights=[3,2,1] binaryoutput=False)
This is because of missing validation between the elements of the values argument and the shape of the sparse output:
cc for (int64t i = 0; i < indicesmat.dimension(0); ++i) { const int64t batch = indicesmat(i, 0); const Tidx bin = values(i); ... out(batch, bin) = ...; }
Patches We have patched the issue in GitHub commit f410212e373eb2aec4c9e60bf3702eba99a38aba.
The fix will be included in TensorFlow 2.7.0. We will also cherrypick this commit on TensorFlow 2.6.1, TensorFlow 2.5.2, and TensorFlow 2.4.4, as these are also affected and still in supported range.
For more information Please consult our security guide for more information regarding the security model and how to contact us with issues and questions.
Attribution This vulnerability has been reported by members of the Aivul Team from Qihoo 360.
Other sources
TensorFlow is an open source platform for machine learning. In affected versions the implementation of SparseBinCount is vulnerable to a heap OOB access. This is because of missing validation between the elements of the values argument and the shape of the sparse output. The fix will be included in TensorFlow 2.7.0. We will also cherrypick this commit on TensorFlow 2.6.1, TensorFlow 2.5.2, and TensorFlow 2.4.4, as these are also affected and still in supported range.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is CVE-2021-41226?
CVE-2021-41226 is a vulnerability in TensorFlow, an open source platform for machine learning, which allows for a heap out-of-bounds access in the SparseBinCount implementation.
What is the severity of CVE-2021-41226?
CVE-2021-41226 has a severity value of 7.1, which is considered high.
How does CVE-2021-41226 affect TensorFlow?
CVE-2021-41226 affects certain versions of TensorFlow (up to and including 2.6.1) in the implementation of SparseBinCount due to missing validation between the elements of the 'values' argument and the shape of the sparse output.
How can I fix CVE-2021-41226?
To mitigate CVE-2021-41226, it is recommended to update TensorFlow to version 2.4.5, 2.5.3, or 2.6.2 or later as the fix has been included in those versions.
Where can I find more information about CVE-2021-41226?
More information about CVE-2021-41226 can be found in the TensorFlow GitHub commit and security advisories: [GitHub:tensorflow/commit/f410212e373eb2aec4c9e60bf3702eba99a38aba](https://github.com/tensorflow/tensorflow/commit/f410212e373eb2aec4c9e60bf3702eba99a38aba) and [GitHub:tensorflow/security/advisories/GHSA-374m-jm66-3vj8](https://github.com/tensorflow/tensorflow/security/advisories/GHSA-374m-jm66-3vj8).