AVID-2026-R0763

Description

Heap buffer overflow in SparseSplit (CVE-2021-29558)

Details

TensorFlow is an end-to-end open source platform for machine learning. An attacker can cause a heap buffer overflow in tf.raw_ops.SparseSplit. This is because the implementation(https://github.com/tensorflow/tensorflow/blob/699bff5d961f0abfde8fa3f876e6d241681fbef8/tensorflow/core/util/sparse/sparse_tensor.h#L528-L530) accesses an array element based on a user controlled offset. The fix will be included in TensorFlow 2.5.0. We will also cherrypick this commit on TensorFlow 2.4.2, TensorFlow 2.3.3, TensorFlow 2.2.3 and TensorFlow 2.1.4, as these are also affected and still in supported range.

Reason for inclusion in AVID: CVE-2021-29558 describes a heap buffer overflow in TensorFlow’s SparseSplit operation. It concerns an AI framework (TensorFlow) used in ML pipelines, which is a core component of the software supply chain for general-purpose AI systems. It is a CVE-style vulnerability (out-of-bounds write) with a documented fix in a TensorFlow release, and the report provides sufficient details and references.

References

• NVD entry
• https://github.com/tensorflow/tensorflow/security/advisories/GHSA-mqh2-9wrp-vx84
• https://github.com/tensorflow/tensorflow/commit/8ba6fa29cd8bf9cef9b718dc31c78c73081f5b31

Affected or Relevant Artifacts

• Developer: tensorflow
• Deployer: tensorflow
• Artifact Details:

Impact

AVID Taxonomy Categorization

• Risk domains: Security
• SEP subcategories: S0100: Software Vulnerability
• Lifecycle stages: L06: Deployment

CVSS

CWE

Other information

• Report Type: Advisory
• Credits:
• Date Reported: 2021-05-14
• Version: 0.3.3
• AVID Entry