TensorFlowGHSA-9w2p-5mgw-p94c

Integer overflow due to conversion to unsigned

CVE-2021-37645 · Published Aug 25, 2021 · updated Jul 8, 2026

Medium5.5

Fix: upgrade to 2.4.3 or later (2 fixed versions below)

Impact

The implementation of tf.raw_ops.QuantizeAndDequantizeV4Grad is vulnerable to an integer overflow issue caused by converting a signed integer value to an unsigned one and then allocating memory based on this value.

```python

import tensorflow as tf

tf.raw_ops.QuantizeAndDequantizeV4Grad(

gradients=[1.0,2.0],

input=[1.0,1.0],

input_min=[0.0],

input_max=[10.0],

axis=-100)

The [implementation](https://github.com/tensorflow/tensorflow/blob/8d72537c6abf5a44103b57b9c2e22c14f5f49698/tensorflow/core/kernels/quantize_and_dequantize_op.cc#L126) uses the axis value as the size argument to absl::InlinedVector constructor. But, the constructor uses an unsigned type for the argument, so the implicit conversion transforms the negative value to a large integer.

Patches

We have patched the issue in GitHub commit [96f364a1ca3009f98980021c4b32be5fdcca33a1](https://github.com/tensorflow/tensorflow/commit/96f364a1ca3009f98980021c4b32be5fdcca33a1).

The fix will be included in TensorFlow 2.6.0. We will also cherrypick this commit on TensorFlow 2.5.1, and TensorFlow 2.4.3, as these are also affected and still in supported range.

For more information

Please consult [our security guide](https://github.com/tensorflow/tensorflow/blob/master/SECURITY.md) for more information regarding the security model and how to contact us with issues and questions.

###...

Affected versions

Package	Affected	Fixed in
tensorflow PyPI	< 2.4.3	2.4.3
	>= 2.5.0, < 2.5.1	2.5.1

Details and references

### Impact The implementation of `tf.raw_ops.QuantizeAndDequantizeV4Grad` is vulnerable to an integer overflow issue caused by converting a signed integer value to an unsigned one and then allocating memory based on this value. ```python import tensorflow as tf tf.raw_ops.QuantizeAndDequantizeV4Grad( gradients=[1.0,2.0], input=[1.0,1.0], input_min=[0.0], input_max=[10.0], axis=-100) ``` The [implementation](https://github.com/tensorflow/tensorflow/blob/8d72537c6abf5a44103b57b9c2e22c14f5f49698/tensorflow/core/kernels/quantize_and_dequantize_op.cc#L126) uses the `axis` value as the size argument to `absl::InlinedVector` constructor. But, the constructor uses an unsigned type for the argument, so the implicit conversion transforms the negative value to a large integer. ### Patches We have patched the issue in GitHub commit [96f364a1ca3009f98980021c4b32be5fdcca33a1](https://github.com/tensorflow/tensorflow/commit/96f364a1ca3009f98980021c4b32be5fdcca33a1). The fix will be included in TensorFlow 2.6.0. We will also cherrypick this commit on TensorFlow 2.5.1, and TensorFlow 2.4.3, as these are also affected and still in supported range. ### For more information Please consult [our security guide](https://github.com/tensorflow/tensorflow/blob/master/SECURITY.md) for more information regarding the security model and how to contact us with issues and questions. ### Attribution This vulnerability has been reported by members of the Aivul Team from Qihoo 360.

CVSS 3.1: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Severity from: GitHub (reviewed advisory)
Weakness: CWE-681
Also known as: BIT-tensorflow-2021-37645, CVE-2021-37645, PYSEC-2021-267, PYSEC-2021-558, PYSEC-2021-756

More TensorFlow advisories

All TensorFlow

High 7.3Aug 25, 2021

Heap out of bounds access in sparse reduction operationsCVE-2021-37635fixed in 2.3.4 +2 Medium 5.5Aug 25, 2021

Floating point exception in `SparseDenseCwiseDiv`CVE-2021-37636fixed in 2.3.4 +2 High 7.7Aug 25, 2021

Null pointer dereference in `CompressElement`CVE-2021-37637fixed in 2.3.4 +2 High 7.7Aug 25, 2021

Null pointer dereference in `RaggedTensorToTensor`CVE-2021-37638fixed in 2.3.4 +2 High 8.4Aug 25, 2021

Null pointer dereference and heap OOB read in operations restoring tensorsCVE-2021-37639fixed in 2.3.4 +2 Medium 5.5Aug 25, 2021

Integer division by 0 in sparse reshapingCVE-2021-37640fixed in 2.3.4 +2