AVID-2026-R0783

Description

Heap buffer overflow in MaxPoolGrad (CVE-2021-29579)

Details

TensorFlow is an end-to-end open source platform for machine learning. The implementation of tf.raw_ops.MaxPoolGrad is vulnerable to a heap buffer overflow. The implementation(https://github.com/tensorflow/tensorflow/blob/ab1e644b48c82cb71493f4362b4dd38f4577a1cf/tensorflow/core/kernels/maxpooling_op.cc#L194-L203) fails to validate that indices used to access elements of input/output arrays are valid. Whereas accesses to input_backprop_flat are guarded by FastBoundsCheck, the indexing in out_backprop_flat can result in OOB access. The fix will be included in TensorFlow 2.5.0. We will also cherrypick this commit on TensorFlow 2.4.2, TensorFlow 2.3.3, TensorFlow 2.2.3 and TensorFlow 2.1.4, as these are also affected and still in supported range.

Reason for inclusion in AVID: CVE-2021-29579 describes a heap buffer overflow in TensorFlow’s MaxPoolGrad, a core kernel in a major AI framework. This is a software vulnerability affecting a component commonly used to build, train, and deploy AI systems, i.e., the AI software stack. It directly relates to the software supply chain of general-purpose AI systems (TensorFlow and its dependencies). The report provides concrete details, affected versions, and a fix, supporting evidence of a vulnerability in the AI software stack.

References

• NVD entry
• https://github.com/tensorflow/tensorflow/security/advisories/GHSA-79fv-9865-4qcv
• https://github.com/tensorflow/tensorflow/commit/a74768f8e4efbda4def9f16ee7e13cf3922ac5f7

Affected or Relevant Artifacts

• Developer: tensorflow
• Deployer: tensorflow
• Artifact Details:

Impact

AVID Taxonomy Categorization

• Risk domains: Security
• SEP subcategories: S0100: Software Vulnerability
• Lifecycle stages: L06: Deployment

CVSS

CWE

Other information

• Report Type: Advisory
• Credits:
• Date Reported: 2021-05-14
• Version: 0.3.3
• AVID Entry