AI and data stack advisories

Severe, 6 weeks1498Projects326

1498 severe, 6 weeks · 326 projects

TensorFlowGHSA-5hj3-vjjf-f5m7

Heap OOB in `SdcaOptimizerV2`

TensorFlow

CVE-2021-37672 · Published Aug 25, 2021 · updated Jul 8, 2026

Medium5.5
Fix: upgrade to 2.3.4 or later (3 fixed versions below)
GitHub advisory

Impact

An attacker can read from outside of bounds of heap allocated data by sending specially crafted illegal arguments to tf.raw_ops.SdcaOptimizerV2:

```python

import tensorflow as tf

tf.raw_ops.SdcaOptimizerV2(

sparse_example_indices=[[1]],

sparse_feature_indices=[[1]],

sparse_feature_values=[[1.0,2.0]],

dense_features=[[1.0]],

example_weights=[1.0],

example_labels=[],

sparse_indices=[1],

sparse_weights=[1.0],

dense_weights=[[1.0]],

example_state_data=[[100.0,100.0,100.0,100.0]],

loss_type='logistic_loss',

l1=100.0,

l2=100.0,

num_loss_partitions=1,

num_inner_iterations=1,

adaptive=True)

`

The [implementation](https://github.com/tensorflow/tensorflow/blob/460e000de3a83278fb00b61a16d161b1964f15f4/tensorflow/core/kernels/sdca_internal.cc#L320-L353) does not check that the length of example_labels is the same as the number of examples.

Patches

We have patched the issue in GitHub commit [a4e138660270e7599793fa438cd7b2fc2ce215a6](https://github.com/tensorflow/tensorflow/commit/a4e138660270e7599793fa438cd7b2fc2ce215a6).

The fix will be included in TensorFlow 2.6.0. We will also cherrypick this commit on TensorFlow 2.5.1, TensorFlow 2.4.3, and TensorFlow 2.3.4, as these are also affected and still in supported range.

For more information

Please consult [our security...

Affected versions

PackageAffectedFixed in
tensorflow
PyPI
< 2.3.42.3.4
>= 2.4.0, < 2.4.32.4.3
>= 2.5.0, < 2.5.12.5.1
Details and references

### Impact An attacker can read from outside of bounds of heap allocated data by sending specially crafted illegal arguments to `tf.raw_ops.SdcaOptimizerV2`: ```python import tensorflow as tf tf.raw_ops.SdcaOptimizerV2( sparse_example_indices=[[1]], sparse_feature_indices=[[1]], sparse_feature_values=[[1.0,2.0]], dense_features=[[1.0]], example_weights=[1.0], example_labels=[], sparse_indices=[1], sparse_weights=[1.0], dense_weights=[[1.0]], example_state_data=[[100.0,100.0,100.0,100.0]], loss_type='logistic_loss', l1=100.0, l2=100.0, num_loss_partitions=1, num_inner_iterations=1, adaptive=True) ``` The [implementation](https://github.com/tensorflow/tensorflow/blob/460e000de3a83278fb00b61a16d161b1964f15f4/tensorflow/core/kernels/sdca_internal.cc#L320-L353) does not check that the length of `example_labels` is the same as the number of examples. ### Patches We have patched the issue in GitHub commit [a4e138660270e7599793fa438cd7b2fc2ce215a6](https://github.com/tensorflow/tensorflow/commit/a4e138660270e7599793fa438cd7b2fc2ce215a6). The fix will be included in TensorFlow 2.6.0. We will also cherrypick this commit on TensorFlow 2.5.1, TensorFlow 2.4.3, and TensorFlow 2.3.4, as these are also affected and still in supported range. ### For more information Please consult [our security guide](https://github.com/tensorflow/tensorflow/blob/master/SECURITY.md) for more information regarding the security model and how to contact us with issues and questions. ### Attribution This vulnerability has been reported by members of the Aivul Team from Qihoo 360.

CVSS 3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Severity from
GitHub (reviewed advisory)
Weakness
CWE-125
Also known as
BIT-tensorflow-2021-37672, CVE-2021-37672, PYSEC-2021-294, PYSEC-2021-585, PYSEC-2021-783

More TensorFlow advisories

All TensorFlow
High 7.3Aug 25, 2021Heap out of bounds access in sparse reduction operationsCVE-2021-37635fixed in 2.3.4 +2Medium 5.5Aug 25, 2021Floating point exception in `SparseDenseCwiseDiv`CVE-2021-37636fixed in 2.3.4 +2High 7.7Aug 25, 2021Null pointer dereference in `CompressElement`CVE-2021-37637fixed in 2.3.4 +2High 7.7Aug 25, 2021Null pointer dereference in `RaggedTensorToTensor`CVE-2021-37638fixed in 2.3.4 +2High 8.4Aug 25, 2021Null pointer dereference and heap OOB read in operations restoring tensorsCVE-2021-37639fixed in 2.3.4 +2Medium 5.5Aug 25, 2021Integer division by 0 in sparse reshapingCVE-2021-37640fixed in 2.3.4 +2