id: PYSEC-2021-243
details: TensorFlow is an end-to-end open source platform for machine learning. A
  specially crafted TFLite model could trigger an OOB read on heap in the TFLite implementation
  of `Split_V`(https://github.com/tensorflow/tensorflow/blob/c59c37e7b2d563967da813fa50fe20b21f4da683/tensorflow/lite/kernels/split_v.cc#L99).
  If `axis_value` is not a value between 0 and `NumDimensions(input)`, then the `SizeOfDimension`
  function(https://github.com/tensorflow/tensorflow/blob/102b211d892f3abc14f845a72047809b39cc65ab/tensorflow/lite/kernels/kernel_util.h#L148-L150)
  will access data outside the bounds of the tensor shape array. The fix will be included
  in TensorFlow 2.5.0. We will also cherrypick this commit on TensorFlow 2.4.2, TensorFlow
  2.3.3, TensorFlow 2.2.3 and TensorFlow 2.1.4, as these are also affected and still
  in supported range.
affected:
- package:
    name: tensorflow
    ecosystem: PyPI
    purl: pkg:pypi/tensorflow
  ranges:
  - type: GIT
    repo: https://github.com/tensorflow/tensorflow
    events:
    - introduced: "0"
    - fixed: ae2daeb45abfe2c6dda539cf8d0d6f653d3ef412
  - type: ECOSYSTEM
    events:
    - introduced: "0"
    - fixed: 2.1.4
    - introduced: 2.2.0
    - fixed: 2.2.3
    - introduced: 2.3.0
    - fixed: 2.3.3
    - introduced: 2.4.0
    - fixed: 2.4.2
  versions:
  - 0.12.0
  - 0.12.0rc0
  - 0.12.0rc1
  - 0.12.1
  - 1.0.0
  - 1.0.1
  - 1.1.0
  - 1.1.0rc0
  - 1.1.0rc1
  - 1.1.0rc2
  - 1.10.0
  - 1.10.0rc0
  - 1.10.0rc1
  - 1.10.1
  - 1.11.0
  - 1.11.0rc0
  - 1.11.0rc1
  - 1.11.0rc2
  - 1.12.0
  - 1.12.0rc0
  - 1.12.0rc1
  - 1.12.0rc2
  - 1.12.2
  - 1.12.3
  - 1.13.0rc0
  - 1.13.0rc1
  - 1.13.0rc2
  - 1.13.1
  - 1.13.2
  - 1.14.0
  - 1.14.0rc0
  - 1.14.0rc1
  - 1.15.0
  - 1.15.0rc0
  - 1.15.0rc1
  - 1.15.0rc2
  - 1.15.0rc3
  - 1.15.2
  - 1.15.3
  - 1.15.4
  - 1.15.5
  - 1.2.0
  - 1.2.0rc0
  - 1.2.0rc1
  - 1.2.0rc2
  - 1.2.1
  - 1.3.0
  - 1.3.0rc0
  - 1.3.0rc1
  - 1.3.0rc2
  - 1.4.0
  - 1.4.0rc0
  - 1.4.0rc1
  - 1.4.1
  - 1.5.0
  - 1.5.0rc0
  - 1.5.0rc1
  - 1.5.1
  - 1.6.0
  - 1.6.0rc0
  - 1.6.0rc1
  - 1.7.0
  - 1.7.0rc0
  - 1.7.0rc1
  - 1.7.1
  - 1.8.0
  - 1.8.0rc0
  - 1.8.0rc1
  - 1.9.0
  - 1.9.0rc0
  - 1.9.0rc1
  - 1.9.0rc2
  - 2.0.0
  - 2.0.0a0
  - 2.0.0b0
  - 2.0.0b1
  - 2.0.0rc0
  - 2.0.0rc1
  - 2.0.0rc2
  - 2.0.1
  - 2.0.2
  - 2.0.3
  - 2.0.4
  - 2.1.0
  - 2.1.0rc0
  - 2.1.0rc1
  - 2.1.0rc2
  - 2.1.1
  - 2.1.2
  - 2.1.3
  - 2.2.0
  - 2.2.1
  - 2.2.2
  - 2.3.0
  - 2.3.1
  - 2.3.2
  - 2.4.0
  - 2.4.1
references:
- type: ADVISORY
  url: https://github.com/tensorflow/tensorflow/security/advisories/GHSA-h4pc-gx2w-f2xv
- type: FIX
  url: https://github.com/tensorflow/tensorflow/commit/ae2daeb45abfe2c6dda539cf8d0d6f653d3ef412
aliases:
- CVE-2021-29606
- GHSA-h4pc-gx2w-f2xv
modified: "2021-08-27T03:22:40.241160Z"
published: "2021-05-14T20:15:00Z"