CVE-2021-29596

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2021-29596

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-29596.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2021-29596

Aliases

Published

2021-05-14T20:15:15.257Z

Modified

2026-03-12T13:49:08.864314Z

Severity

7.8 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator

Summary

[none]

Details

TensorFlow is an end-to-end open source platform for machine learning. The implementation of the EmbeddingLookup TFLite operator is vulnerable to a division by zero error(https://github.com/tensorflow/tensorflow/blob/e4b29809543b250bc9b19678ec4776299dd569ba/tensorflow/lite/kernels/embedding_lookup.cc#L73-L74). An attacker can craft a model such that the first dimension of the value input is 0. The fix will be included in TensorFlow 2.5.0. We will also cherrypick this commit on TensorFlow 2.4.2, TensorFlow 2.3.3, TensorFlow 2.2.3 and TensorFlow 2.1.4, as these are also affected and still in supported range.

References

Affected packages

Git / github.com/tensorflow/tensorflow

Affected ranges

Type

GIT

Repo

https://github.com/tensorflow/tensorflow

Events

Introduced

Fixed

0931ea3d985bb9c8fdd054a5e29c4129623c849b

Introduced

2b96f3662bd776e277f86997659e61046b56c315

Fixed

cfe0c80169ae984bcdc99ff6de7444164aaa8e07

Introduced

b36436b087bd8e8701ef51718179037cccdfc26e

Fixed

3929ffacfbef7c431e8397920d040aaf47acff19

Introduced

582c8d236cb079023657287c318ff26adb239002

Fixed

1923123d32ea41d92b70a27a3f6ecf0763b56f6c

Fixed

f61c57bd425878be108ec787f4d96390579fb83e

Database specific

{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "fixed": "2.1.4"
        },
        {
            "introduced": "2.2.0"
        },
        {
            "fixed": "2.2.3"
        },
        {
            "introduced": "2.3.0"
        },
        {
            "fixed": "2.3.3"
        },
        {
            "introduced": "2.4.0"
        },
        {
            "fixed": "2.4.2"
        }
    ]
}

Database specific

vanir_signatures

[
    {
        "signature_type": "Function",
        "deprecated": false,
        "id": "CVE-2021-29596-27edbd85",
        "target": {
            "file": "tensorflow/lite/kernels/embedding_lookup.cc",
            "function": "EvalSimple"
        },
        "digest": {
            "length": 748.0,
            "function_hash": "149913468815747346666472510062383376108"
        },
        "signature_version": "v1",
        "source": "https://github.com/tensorflow/tensorflow/commit/f61c57bd425878be108ec787f4d96390579fb83e"
    },
    {
        "signature_type": "Line",
        "deprecated": false,
        "id": "CVE-2021-29596-4de58ad9",
        "target": {
            "file": "tensorflow/lite/kernels/embedding_lookup.cc"
        },
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "188084668127700992529642366518999749543",
                "64964093058375454319088505375309711878",
                "8408742153903200406530275458260901015",
                "24315383204719158717956958047230102524"
            ]
        },
        "signature_version": "v1",
        "source": "https://github.com/tensorflow/tensorflow/commit/f61c57bd425878be108ec787f4d96390579fb83e"
    }
]

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-29596.json"