AVID-2026-R0807

Description

Null dereference in Grappler’s TrySimplify (CVE-2021-29616)

Details

TensorFlow is an end-to-end open source platform for machine learning. The implementation of TrySimplify(https://github.com/tensorflow/tensorflow/blob/c22d88d6ff33031aa113e48aa3fc9aa74ed79595/tensorflow/core/grappler/optimizers/arithmetic_optimizer.cc#L390-L401) has undefined behavior due to dereferencing a null pointer in corner cases that result in optimizing a node with no inputs. The fix will be included in TensorFlow 2.5.0. We will also cherrypick this commit on TensorFlow 2.4.2, TensorFlow 2.3.3, TensorFlow 2.2.3 and TensorFlow 2.1.4, as these are also affected and still in supported range.

Reason for inclusion in AVID: CVE-2021-29616 describes a null pointer dereference vulnerability in TensorFlow’s Grappler TrySimplify, a software vulnerability in a core ML framework. TensorFlow is a key component in AI model training/deployment stacks; the issue affects software dependencies used to build/run AI systems, thus a software supply-chain vulnerability in the AI stack. The CVE has described vulnerability behavior (null dereference), affected versions, and a fix, with references. This satisfies AI-related, GP AI supply chain, security/safety, and sufficient evidence criteria.

References

Affected or Relevant Artifacts

Developer: tensorflow
Deployer: tensorflow
Artifact Details:

Type	Name
System	tensorflow

Impact

AVID Taxonomy Categorization

Risk domains: Security
SEP subcategories: S0100: Software Vulnerability
Lifecycle stages: L06: Deployment

CVSS

Version	3.1
Vector String	CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L
Base Score	2.5
Base Severity	🟢 Low
Attack Vector	LOCAL
Attack Complexity	🔴 High
Privileges Required	🟢 Low
User Interaction	NONE
Scope	UNCHANGED
Confidentiality Impact	NONE
Integrity Impact	NONE
Availability Impact	🟢 Low

CWE

ID	Description
CWE-476	CWE-476: NULL Pointer Dereference

Other information

Report Type: Advisory
Credits:
Date Reported: 2021-05-14
Version: 0.3.3
AVID Entry