CVE-2021-41203: google tensorflow
Vulnerability summary
CVE-2021-41203 is a high (CVSS 7.8) vulnerability in google tensorflow. EPSS estimates a 0.19% chance of exploitation in the next 30 days, higher than 7.9% of scored vulnerabilities.
Timeline
- 05-11-2021PublishedVulnerability first disclosed.
- 04-08-2024Last modifiedVulnerability information updated.
Description
TensorFlow is an open source platform for machine learning. In affected versions an attacker can trigger undefined behavior, integer overflows, segfaults and `CHECK`-fail crashes if they can change saved checkpoints from outside of TensorFlow. This is because the checkpoints loading infrastructure is missing validation for invalid file formats. The fixes will be included in TensorFlow 2.7.0. We will also cherrypick these commits on TensorFlow 2.6.1, TensorFlow 2.5.2, and TensorFlow 2.4.4, as these are also affected and still in supported range.
CVSS metrics
5 scores · 3 sources · 3 versions- OSV · PypiEcosystem advisory · calculated7.8HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- NVDNIST7.8HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS trend
Probability
0.19%
Chance of exploitation in the next 30 days
Percentile
8%
Versus all other CVEs
30-day change
0.00 pp
From 0.19% on 18-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root cause- CWE-345Insufficient Verification of Data AuthenticityThe product does not sufficiently verify the origin or authenticity of data, in a way that causes it to accept invalid data.
- CWE-190Integer Overflow or WraparoundThe product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.
Affected systems
PyPI3 products
- tensorflow≥ 2.6.0, < 2.6.1 | ≥ 2.5.0, < 2.5.2 | < 2.4.4 | < b619c6f865715ca3b15ef1842b5b95edbaa710ad | ≥ 2.7.0rc0, < 2.7.0
- tensorflow-cpu≥ 2.6.0, < 2.6.1 | ≥ 2.5.0, < 2.5.2 | < 2.4.4 | < b619c6f865715ca3b15ef1842b5b95edbaa710ad | ≥ 2.7.0rc0, < 2.7.0
- tensorflow-gpu≥ 2.6.0, < 2.6.1 | ≥ 2.5.0, < 2.5.2 | < 2.4.4 | < b619c6f865715ca3b15ef1842b5b95edbaa710ad | ≥ 2.7.0rc0, < 2.7.0
Google1 product
- tensorflow< 2.4.4 | ≥ 2.5.0, < 2.5.2 | ≥ 2.6.0, < 2.6.1
Tensorflow1 product
- tensorflow≥ 2.6.0, < 2.6.1 | ≥ 2.5.0, < 2.5.2 | < 2.4.4
3 vendors · 5 products
References
10 links- github.com/tensorflow/tensorflow/security/advisories/GHSA-7pxj-m4jf-r6h2X Refsource CONFIRMWEBAdvisoryThird Party Advisory
- github.com/tensorflow/tensorflow/commit/368af875869a204b4ac552b9ddda59f6a46a56ecX Refsource MISCWEBFIXPatchThird Party Advisory
- github.com/tensorflow/tensorflow/commit/abcced051cb1bd8fb05046ac3b6023a7ebcc4578X Refsource MISCWEBFIXPatchThird Party Advisory
- github.com/tensorflow/tensorflow/commit/b619c6f865715ca3b15ef1842b5b95edbaa710adX Refsource MISCWEBFIXPatchThird Party Advisory
- github.com/tensorflow/tensorflow/commit/e8dc63704c88007ee4713076605c90188d66f3d2X Refsource MISCWEBFIXPatchThird Party Advisory
