id: PYSEC-2021-449
details: TensorFlow is an end-to-end open source platform for machine learning. Specifying
  a negative dense shape in `tf.raw_ops.SparseCountSparseOutput` results in a segmentation
  fault being thrown out from the standard library as `std::vector` invariants are
  broken. This is because the implementation(https://github.com/tensorflow/tensorflow/blob/8f7b60ee8c0206a2c99802e3a4d1bb55d2bc0624/tensorflow/core/kernels/count_ops.cc#L199-L213)
  assumes the first element of the dense shape is always positive and uses it to initialize
  a `BatchedMap<T>` (i.e., `std::vector<absl::flat_hash_map<int64,T>>`(https://github.com/tensorflow/tensorflow/blob/8f7b60ee8c0206a2c99802e3a4d1bb55d2bc0624/tensorflow/core/kernels/count_ops.cc#L27))
  data structure. If the `shape` tensor has more than one element, `num_batches` is
  the first value in `shape`. Ensuring that the `dense_shape` argument is a valid
  tensor shape (that is, all elements are non-negative) solves this issue. The fix
  will be included in TensorFlow 2.5.0. We will also cherrypick this commit on TensorFlow
  2.4.2 and TensorFlow 2.3.3.
affected:
- package:
    name: tensorflow-cpu
    ecosystem: PyPI
    purl: pkg:pypi/tensorflow-cpu
  ranges:
  - type: GIT
    repo: https://github.com/tensorflow/tensorflow
    events:
    - introduced: "0"
    - fixed: c57c0b9f3a4f8684f3489dd9a9ec627ad8b599f5
  - type: ECOSYSTEM
    events:
    - introduced: 2.3.0
    - fixed: 2.3.3
    - introduced: 2.4.0
    - fixed: 2.4.2
  versions:
  - 2.3.0
  - 2.3.1
  - 2.3.2
  - 2.4.0
  - 2.4.1
references:
- type: FIX
  url: https://github.com/tensorflow/tensorflow/commit/c57c0b9f3a4f8684f3489dd9a9ec627ad8b599f5
- type: ADVISORY
  url: https://github.com/tensorflow/tensorflow/security/advisories/GHSA-hr84-fqvp-48mm
aliases:
- CVE-2021-29521
- GHSA-hr84-fqvp-48mm
modified: "2021-12-09T06:34:46.609278Z"
published: "2021-05-14T20:15:00Z"