id: PYSEC-2021-515
details: TensorFlow is an end-to-end open source platform for machine learning. The
  `Prepare` step of the `SpaceToDepth` TFLite operator does not check for 0 before
  division(https://github.com/tensorflow/tensorflow/blob/5f7975d09eac0f10ed8a17dbb6f5964977725adc/tensorflow/lite/kernels/space_to_depth.cc#L63-L67).
  An attacker can craft a model such that `params->block_size` would be zero. The
  fix will be included in TensorFlow 2.5.0. We will also cherrypick this commit on
  TensorFlow 2.4.2, TensorFlow 2.3.3, TensorFlow 2.2.3 and TensorFlow 2.1.4, as these
  are also affected and still in supported range.
affected:
- package:
    name: tensorflow-cpu
    ecosystem: PyPI
    purl: pkg:pypi/tensorflow-cpu
  ranges:
  - type: GIT
    repo: https://github.com/tensorflow/tensorflow
    events:
    - introduced: "0"
    - fixed: 0d45ea1ca641b21b73bcf9c00e0179cda284e7e7
  - type: ECOSYSTEM
    events:
    - introduced: "0"
    - fixed: 2.2.0rc0
    - introduced: 2.2.0
    - fixed: 2.3.0rc0
    - introduced: 2.3.0
    - fixed: 2.3.4
    - introduced: 2.4.0
    - fixed: 2.4.3
  versions:
  - 1.15.0
  - 2.1.0
  - 2.1.1
  - 2.1.2
  - 2.1.3
  - 2.1.4
  - 2.2.0
  - 2.2.1
  - 2.2.2
  - 2.2.3
  - 2.3.0
  - 2.3.1
  - 2.3.2
  - 2.3.3
  - 2.4.0
  - 2.4.1
  - 2.4.2
references:
- type: ADVISORY
  url: https://github.com/tensorflow/tensorflow/security/advisories/GHSA-j7rm-8ww4-xx2g
- type: FIX
  url: https://github.com/tensorflow/tensorflow/commit/0d45ea1ca641b21b73bcf9c00e0179cda284e7e7
aliases:
- CVE-2021-29587
- GHSA-j7rm-8ww4-xx2g
modified: "2021-12-09T06:34:56.873016Z"
published: "2021-05-14T20:15:00Z"