TensorFlowGHSA-r4c4-5fpq-56wg

Heap OOB in boosted trees

CVE-2021-37664 · Published Aug 25, 2021 · updated Jul 8, 2026

High7.3

Fix: upgrade to 2.3.4 or later (3 fixed versions below)

Impact

An attacker can read from outside of bounds of heap allocated data by sending specially crafted illegal arguments to BoostedTreesSparseCalculateBestFeatureSplit:

```python

import tensorflow as tf

tf.raw_ops.BoostedTreesSparseCalculateBestFeatureSplit(

node_id_range=[0,10],

stats_summary_indices=[[1, 2, 3, 0x1000000]],

stats_summary_values=[1.0],

stats_summary_shape=[1,1,1,1],

l1=l2=[1.0],

tree_complexity=[0.5],

min_node_weight=[1.0],

logits_dimension=3,

split_type='inequality')

The [implementation](https://github.com/tensorflow/tensorflow/blob/84d053187cb80d975ef2b9684d4b61981bca0c41/tensorflow/core/kernels/boosted_trees/stats_ops.cc) needs to validate that each value in stats_summary_indices is in range.

Patches

We have patched the issue in GitHub commit [e84c975313e8e8e38bb2ea118196369c45c51378](https://github.com/tensorflow/tensorflow/commit/e84c975313e8e8e38bb2ea118196369c45c51378).

The fix will be included in TensorFlow 2.6.0. We will also cherrypick this commit on TensorFlow 2.5.1, TensorFlow 2.4.3, and TensorFlow 2.3.4, as these are also affected and still in supported range.

For more information

Please consult [our security guide](https://github.com/tensorflow/tensorflow/blob/master/SECURITY.md) for more information regarding the security model and how to contact us with issues and questions.

Attribution

This...

Affected versions

Package	Affected	Fixed in
tensorflow PyPI	< 2.3.4	2.3.4
	>= 2.4.0, < 2.4.3	2.4.3
	>= 2.5.0, < 2.5.1	2.5.1

Details and references

### Impact An attacker can read from outside of bounds of heap allocated data by sending specially crafted illegal arguments to `BoostedTreesSparseCalculateBestFeatureSplit`: ```python import tensorflow as tf tf.raw_ops.BoostedTreesSparseCalculateBestFeatureSplit( node_id_range=[0,10], stats_summary_indices=[[1, 2, 3, 0x1000000]], stats_summary_values=[1.0], stats_summary_shape=[1,1,1,1], l1=l2=[1.0], tree_complexity=[0.5], min_node_weight=[1.0], logits_dimension=3, split_type='inequality') ``` The [implementation](https://github.com/tensorflow/tensorflow/blob/84d053187cb80d975ef2b9684d4b61981bca0c41/tensorflow/core/kernels/boosted_trees/stats_ops.cc) needs to validate that each value in `stats_summary_indices` is in range. ### Patches We have patched the issue in GitHub commit [e84c975313e8e8e38bb2ea118196369c45c51378](https://github.com/tensorflow/tensorflow/commit/e84c975313e8e8e38bb2ea118196369c45c51378). The fix will be included in TensorFlow 2.6.0. We will also cherrypick this commit on TensorFlow 2.5.1, TensorFlow 2.4.3, and TensorFlow 2.3.4, as these are also affected and still in supported range. ### For more information Please consult [our security guide](https://github.com/tensorflow/tensorflow/blob/master/SECURITY.md) for more information regarding the security model and how to contact us with issues and questions. ### Attribution This vulnerability has been reported by members of the Aivul Team from Qihoo 360.

CVSS 3.1: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H
Severity from: GitHub (reviewed advisory)
Weakness: CWE-125
Also known as: BIT-tensorflow-2021-37664, CVE-2021-37664, PYSEC-2021-286, PYSEC-2021-577, PYSEC-2021-775

More TensorFlow advisories

All TensorFlow

High 7.3Aug 25, 2021

Heap out of bounds access in sparse reduction operationsCVE-2021-37635fixed in 2.3.4 +2 Medium 5.5Aug 25, 2021

Floating point exception in `SparseDenseCwiseDiv`CVE-2021-37636fixed in 2.3.4 +2 High 7.7Aug 25, 2021

Null pointer dereference in `CompressElement`CVE-2021-37637fixed in 2.3.4 +2 High 7.7Aug 25, 2021

Null pointer dereference in `RaggedTensorToTensor`CVE-2021-37638fixed in 2.3.4 +2 High 8.4Aug 25, 2021

Null pointer dereference and heap OOB read in operations restoring tensorsCVE-2021-37639fixed in 2.3.4 +2 Medium 5.5Aug 25, 2021

Integer division by 0 in sparse reshapingCVE-2021-37640fixed in 2.3.4 +2