← Back

CVE-2021-29618

nvd nist
Published: May 14, 2021Modified: Jun 17, 2026

JSON object

Loading...
5.5
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Exploitability: 1.8 / Impact: 3.6
Source: NVD

Description

TensorFlow is an end-to-end open source platform for machine learning. Passing a complex argument to `tf.transpose` at the same time as passing `conjugate=True` argument results in a crash. The fix will be included in TensorFlow 2.5.0. We will also cherrypick this commit on TensorFlow 2.4.2, TensorFlow 2.3.3, TensorFlow 2.2.3 and TensorFlow 2.1.4, as these are also affected and still in supported range.

Affected (4)

Products: Google: Tensorflow
Google
1 product
Tensorflow
Configuration A
4 vulnerable
Vulnerable SoftwareAffected Versions
Google
Tensorflow
Before 2.1.4
Tensorflow
From 2.2.0 to 2.2.3
Tensorflow
From 2.3.0 to 2.3.3
Tensorflow
From 2.4.0 to 2.4.2

Related CWEs

CWE-755
Improper Handling of Exceptional Conditions
The product does not handle or incorrectly handles an exceptional condition.

References (8)

Source: security-advisories@github.com
Broken Link
Source: security-advisories@github.com
Broken Link
Source: security-advisories@github.com
PatchThird Party Advisory
Source: security-advisories@github.com
ExploitPatchThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Broken Link
Source: af854a3a-2127-422b-91ae-364da2661108
Broken Link
Source: af854a3a-2127-422b-91ae-364da2661108
PatchThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitPatchThird Party Advisory

Timeline

No history available yet.