CVE-2020-15195: Heap buffer overflow in Tensorflow
(updated )
The implementation of SparseFillEmptyRowsGrad uses a double indexing pattern:
https://github.com/tensorflow/tensorflow/blob/0e68f4d3295eb0281a517c3662f6698992b7b2cf/tensorflow/core/kernels/sparse_fill_empty_rows_op.cc#L263-L269
It is possible for reverse_index_map(i) to be an index outside of bounds of grad_values, thus resulting in a heap buffer overflow.
References
- github.com/advisories/GHSA-63xm-rx5p-xvqr
- github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2020-275.yaml
- github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2020-310.yaml
- github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2020-118.yaml
- github.com/tensorflow/tensorflow
- github.com/tensorflow/tensorflow/commit/390611e0d45c5793c7066110af37c8514e6a6c54
- github.com/tensorflow/tensorflow/releases/tag/v2.3.1
- github.com/tensorflow/tensorflow/security/advisories/GHSA-63xm-rx5p-xvqr
- nvd.nist.gov/vuln/detail/CVE-2020-15195
Code Behaviors & Features
Detect and mitigate CVE-2020-15195 with GitLab Dependency Scanning
Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →