id: PYSEC-2021-536
details: TensorFlow is an end-to-end open source platform for machine learning. Due
  to lack of validation in `tf.raw_ops.RaggedTensorToTensor`, an attacker can exploit
  an undefined behavior if input arguments are empty. The implementation(https://github.com/tensorflow/tensorflow/blob/656e7673b14acd7835dc778867f84916c6d1cac2/tensorflow/core/kernels/ragged_tensor_to_tensor_op.cc#L356-L360)
  only checks that one of the tensors is not empty, but does not check for the other
  ones. There are multiple `DCHECK` validations to prevent heap OOB, but these are
  no-op in release builds, hence they don't prevent anything. The fix will be included
  in TensorFlow 2.5.0. We will also cherrypick these commits on TensorFlow 2.4.2,
  TensorFlow 2.3.3, TensorFlow 2.2.3 and TensorFlow 2.1.4, as these are also affected
  and still in supported range.
affected:
- package:
    name: tensorflow-cpu
    ecosystem: PyPI
    purl: pkg:pypi/tensorflow-cpu
  ranges:
  - type: GIT
    repo: https://github.com/tensorflow/tensorflow
    events:
    - introduced: "0"
    - fixed: c4d7afb6a5986b04505aca4466ae1951686c80f6
    - fixed: f94ef358bb3e91d517446454edff6535bcfe8e4a
    - fixed: b761c9b652af2107cfbc33efd19be0ce41daa33e
  - type: ECOSYSTEM
    events:
    - introduced: "0"
    - fixed: 2.2.0rc0
    - introduced: 2.2.0
    - fixed: 2.3.0rc0
    - introduced: 2.3.0
    - fixed: 2.3.4
    - introduced: 2.4.0
    - fixed: 2.4.3
  versions:
  - 1.15.0
  - 2.1.0
  - 2.1.1
  - 2.1.2
  - 2.1.3
  - 2.1.4
  - 2.2.0
  - 2.2.1
  - 2.2.2
  - 2.2.3
  - 2.3.0
  - 2.3.1
  - 2.3.2
  - 2.3.3
  - 2.4.0
  - 2.4.1
  - 2.4.2
references:
- type: FIX
  url: https://github.com/tensorflow/tensorflow/commit/c4d7afb6a5986b04505aca4466ae1951686c80f6
- type: FIX
  url: https://github.com/tensorflow/tensorflow/commit/f94ef358bb3e91d517446454edff6535bcfe8e4a
- type: ADVISORY
  url: https://github.com/tensorflow/tensorflow/security/advisories/GHSA-rgvq-pcvf-hx75
- type: FIX
  url: https://github.com/tensorflow/tensorflow/commit/b761c9b652af2107cfbc33efd19be0ce41daa33e
aliases:
- CVE-2021-29608
- GHSA-rgvq-pcvf-hx75
modified: "2021-12-09T06:35:00.179664Z"
published: "2021-05-14T20:15:00Z"