CVE-2021-29587: Division by zero in TFLite's implementation of `SpaceToDepth`

(updated )

The Prepare step of the SpaceToDepth TFLite operator does not check for 0 before division.

const int block_size = params->block_size;
const int input_height = input->dims->data[1];
const int input_width = input->dims->data[2];
int output_height = input_height / block_size;
int output_width = input_width / block_size;

An attacker can craft a model such that params->block_size would be zero.

References

Code Behaviors & Features

Detect and mitigate CVE-2021-29587 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →