CVE-2021-37677

Advisory

Tensorflow-macos versions 2.3.4, 2.4.3, 2.5.1 and 2.6.0 include a fix for CVE-2021-37677: In affected versions the shape inference code for "tf.raw_ops.Dequantize" has a vulnerability that could trigger a denial of service via a segfault if an attacker provides invalid arguments. The shape inference implementation (https://github.com/tensorflow/tensorflow/blob/460e000de3a83278fb00b61a16d161b1964f15f4/tensorflow/core/ops/array_ops.cc#L2999-L3014) uses "axis" to select between two different values for "minmax_rank" which is then used to retrieve tensor dimensions. However, code assumes that "axis" can be either "-1" or a value greater than "-1", with no validation for the other values.
https://github.com/tensorflow/tensorflow/security/advisories/GHSA-qfpc-5pjr-mh26
https://github.com/tensorflow/tensorflow/commit/da857cfa0fde8f79ad0afdbc94e88b5d4bbec764

Affected package

Affected versions

Fixed versions

Vulnerability changelog

This vulnerability has no description

Resources

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-37677
• https://github.com/tensorflow/tensorflow/commit/da857cfa0fde8f79ad0afdbc94e88b5d4bbec764
• https://github.com/tensorflow/tensorflow/security/advisories/GHSA-qfpc-5pjr-mh26