id: PYSEC-2021-703
details: TensorFlow is an end-to-end open source platform for machine learning. The
  implementation of `tf.raw_ops.AvgPool3DGrad` is vulnerable to a heap buffer overflow.
  The implementation(https://github.com/tensorflow/tensorflow/blob/d80ffba9702dc19d1fac74fc4b766b3fa1ee976b/tensorflow/core/kernels/pooling_ops_3d.cc#L376-L450)
  assumes that the `orig_input_shape` and `grad` tensors have similar first and last
  dimensions but does not check that this assumption is validated. The fix will be
  included in TensorFlow 2.5.0. We will also cherrypick this commit on TensorFlow
  2.4.2, TensorFlow 2.3.3, TensorFlow 2.2.3 and TensorFlow 2.1.4, as these are also
  affected and still in supported range.
affected:
- package:
    name: tensorflow-gpu
    ecosystem: PyPI
    purl: pkg:pypi/tensorflow-gpu
  ranges:
  - type: GIT
    repo: https://github.com/tensorflow/tensorflow
    events:
    - introduced: "0"
    - fixed: 6fc9141f42f6a72180ecd24021c3e6b36165fe0d
  - type: ECOSYSTEM
    events:
    - introduced: "0"
    - fixed: 2.1.4
    - introduced: 2.2.0
    - fixed: 2.2.3
    - introduced: 2.3.0
    - fixed: 2.3.3
    - introduced: 2.4.0
    - fixed: 2.4.2
  versions:
  - 0.12.0
  - 0.12.1
  - 1.0.0
  - 1.0.1
  - 1.1.0
  - 1.10.0
  - 1.10.1
  - 1.11.0
  - 1.12.0
  - 1.12.2
  - 1.12.3
  - 1.13.1
  - 1.13.2
  - 1.14.0
  - 1.15.0
  - 1.15.2
  - 1.15.3
  - 1.15.4
  - 1.15.5
  - 1.2.0
  - 1.2.1
  - 1.3.0
  - 1.4.0
  - 1.4.1
  - 1.5.0
  - 1.5.1
  - 1.6.0
  - 1.7.0
  - 1.7.1
  - 1.8.0
  - 1.9.0
  - 2.0.0
  - 2.0.1
  - 2.0.2
  - 2.0.3
  - 2.0.4
  - 2.1.0
  - 2.1.1
  - 2.1.2
  - 2.1.3
  - 2.2.0
  - 2.2.1
  - 2.2.2
  - 2.3.0
  - 2.3.1
  - 2.3.2
  - 2.4.0
  - 2.4.1
references:
- type: ADVISORY
  url: https://github.com/tensorflow/tensorflow/security/advisories/GHSA-v6r6-84gr-92rm
- type: FIX
  url: https://github.com/tensorflow/tensorflow/commit/6fc9141f42f6a72180ecd24021c3e6b36165fe0d
aliases:
- CVE-2021-29577
- GHSA-v6r6-84gr-92rm
modified: "2021-12-09T06:35:28.044558Z"
published: "2021-05-14T20:15:00Z"