AVID-2026-R0745

Description

Heap buffer overflow in QuantizedResizeBilinear (CVE-2021-29537)

Details

TensorFlow is an end-to-end open source platform for machine learning. An attacker can cause a heap buffer overflow in QuantizedResizeBilinear by passing in invalid thresholds for the quantization. This is because the implementation(https://github.com/tensorflow/tensorflow/blob/50711818d2e61ccce012591eeb4fdf93a8496726/tensorflow/core/kernels/quantized_resize_bilinear_op.cc#L705-L706) assumes that the 2 arguments are always valid scalars and tries to access the numeric value directly. The fix will be included in TensorFlow 2.5.0. We will also cherrypick this commit on TensorFlow 2.4.2, TensorFlow 2.3.3, TensorFlow 2.2.3 and TensorFlow 2.1.4, as these are also affected and still in supported range.

Reason for inclusion in AVID: The CVE describes a heap buffer overflow vulnerability in TensorFlow (an AI framework). TensorFlow is a core dependency used to build, train, deploy, and run AI/ML systems, so this is a software supply-chain vulnerability affecting AI software stacks. It concerns an actual vulnerability (CVE with CVSS details) and provides references, fulfilling evidence requirements.

References

Affected or Relevant Artifacts

Developer: tensorflow
Deployer: tensorflow
Artifact Details:

Type	Name
System	tensorflow

Impact

AVID Taxonomy Categorization

Risk domains: Security
SEP subcategories: S0100: Software Vulnerability
Lifecycle stages: L06: Deployment

CVSS

Version	3.1
Vector String	CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L
Base Score	2.5
Base Severity	🟢 Low
Attack Vector	LOCAL
Attack Complexity	🔴 High
Privileges Required	🟢 Low
User Interaction	NONE
Scope	UNCHANGED
Confidentiality Impact	NONE
Integrity Impact	NONE
Availability Impact	🟢 Low

CWE

ID	Description
CWE-131	CWE-131: Incorrect Calculation of Buffer Size

Other information

Report Type: Advisory
Credits:
Date Reported: 2021-05-14
Version: 0.3.3
AVID Entry