id: PYSEC-2021-403
details: TensorFlow is an open source platform for machine learning. In affected versions
  the shape inference code for `QuantizeV2` can trigger a read outside of bounds of
  heap allocated array. This occurs whenever `axis` is a negative value less than
  `-1`. In this case, we are accessing data before the start of a heap buffer. The
  code allows `axis` to be an optional argument (`s` would contain an `error::NOT_FOUND`
  error code). Otherwise, it assumes that `axis` is a valid index into the dimensions
  of the `input` tensor. If `axis` is less than `-1` then this results in a heap OOB
  read. The fix will be included in TensorFlow 2.7.0. We will also cherrypick this
  commit on TensorFlow 2.6.1, as this version is the only one that is also affected.
affected:
- package:
    name: tensorflow
    ecosystem: PyPI
    purl: pkg:pypi/tensorflow
  ranges:
  - type: GIT
    repo: https://github.com/tensorflow/tensorflow
    events:
    - introduced: "0"
    - fixed: a0d64445116c43cf46a5666bd4eee28e7a82f244
  - type: ECOSYSTEM
    events:
    - introduced: 2.6.0
    - fixed: 2.6.1
    - introduced: 2.7.0rc0
    - fixed: 2.7.0
  versions:
  - 2.6.0
  - 2.7.0rc0
  - 2.7.0rc1
references:
- type: ADVISORY
  url: https://github.com/tensorflow/tensorflow/security/advisories/GHSA-cvgx-3v3q-m36c
- type: FIX
  url: https://github.com/tensorflow/tensorflow/commit/a0d64445116c43cf46a5666bd4eee28e7a82f244
aliases:
- CVE-2021-41211
- GHSA-cvgx-3v3q-m36c
modified: "2021-11-13T06:52:43.843277Z"
published: "2021-11-05T21:15:00Z"