AVID-2026-R0804

Description

Incomplete validation in tf.raw_ops.CTCLoss (CVE-2021-29613)

Details

TensorFlow is an end-to-end open source platform for machine learning. Incomplete validation in tf.raw_ops.CTCLoss allows an attacker to trigger an OOB read from heap. The fix will be included in TensorFlow 2.5.0. We will also cherrypick these commits on TensorFlow 2.4.2, TensorFlow 2.3.3, TensorFlow 2.2.3 and TensorFlow 2.1.4, as these are also affected and still in supported range.

Reason for inclusion in AVID: CVE-2021-29613 describes an incomplete validation in TensorFlow’s CTCLoss operation leading to a local out-of-bounds read. TensorFlow is a core AI framework used to build/train/deploy AI systems, so this is a software vulnerability in a component commonly used in general-purpose AI pipelines. The report provides explicit details (affected versions, fixes, references, CVSS metrics) indicating a legitimate security issue in a software supply chain relevant to AI systems.

References

Affected or Relevant Artifacts

Developer: tensorflow
Deployer: tensorflow
Artifact Details:

Type	Name
System	tensorflow

Impact

AVID Taxonomy Categorization

Risk domains: Security
SEP subcategories: S0100: Software Vulnerability
Lifecycle stages: L06: Deployment

CVSS

Version	3.1
Vector String	CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H
Base Score	6.3
Base Severity	🟠 Medium
Attack Vector	LOCAL
Attack Complexity	🔴 High
Privileges Required	🟢 Low
User Interaction	NONE
Scope	UNCHANGED
Confidentiality Impact	NONE
Integrity Impact	🔴 High
Availability Impact	🔴 High

CWE

ID	Description
CWE-665	CWE-665: Improper Initialization

Other information

Report Type: Advisory
Credits:
Date Reported: 2021-05-14
Version: 0.3.3
AVID Entry