AVID-2026-R0752

Description

CHECK-fail in QuantizeAndDequantizeV4Grad (CVE-2021-29544)

Details

TensorFlow is an end-to-end open source platform for machine learning. An attacker can trigger a denial of service via a CHECK-fail in tf.raw_ops.QuantizeAndDequantizeV4Grad. This is because the implementation does not validate the rank of the input_* tensors. In turn, this results in the tensors being passes as they are to QuantizeAndDequantizePerChannelGradientImpl. However, the vec<T> method, requires the rank to 1 and triggers a CHECK failure otherwise. The fix will be included in TensorFlow 2.5.0. We will also cherrypick this commit on TensorFlow 2.4.2 as this is the only other affected version.

Reason for inclusion in AVID: CVE-2021-29544 concerns a TensorFlow kernel input validation bug that can trigger a denial-of-service in AI model workflows. It affects a core AI framework used to train/deploy AI systems, i.e., software components in the AI stack. It is a vulnerability (CWE-754) with CVE reference and remediation details, and the report provides evidence (NVD entry, advisories, commit) illustrating the issue and fix. Therefore it should be kept for AVID curation as a software supply chain vulnerability in general-purpose AI systems.

References

Affected or Relevant Artifacts

Developer: tensorflow
Deployer: tensorflow
Artifact Details:

Type	Name
System	tensorflow

Impact

AVID Taxonomy Categorization

Risk domains: Security
SEP subcategories: S0100: Software Vulnerability
Lifecycle stages: L06: Deployment

CVSS

Version	3.1
Vector String	CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L
Base Score	2.5
Base Severity	🟢 Low
Attack Vector	LOCAL
Attack Complexity	🔴 High
Privileges Required	🟢 Low
User Interaction	NONE
Scope	UNCHANGED
Confidentiality Impact	NONE
Integrity Impact	NONE
Availability Impact	🟢 Low

CWE

ID	Description
CWE-754	CWE-754: Improper Check for Unusual or Exceptional Conditions

Other information

Report Type: Advisory
Credits:
Date Reported: 2021-05-14
Version: 0.3.3
AVID Entry