TensorFlow is an end-to-end open source platform for machine learning. The implementation of TrySimplify(https://github.com/tensorflow/tensorflow/blob/c22d88d6ff33031aa113e48aa3fc9aa74ed79595/tensorflow/core/grappler/optimizers/arithmetic_optimizer.cc#L390-L401) has undefined behavior due to dereferencing a null pointer in corner cases that result in optimizing a node with no inputs. The fix will be included in TensorFlow 2.5.0. We will also cherrypick this commit on TensorFlow 2.4.2, TensorFlow 2.3.3, TensorFlow 2.2.3 and TensorFlow 2.1.4, as these are also affected and still in supported range.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: GitHub_M
Published: 2021-05-14T19:25:27
Updated: 2024-08-03T22:11:06.093Z
Reserved: 2021-03-30T00:00:00
Link: CVE-2021-29616
Vulnrichment
No data.
NVD
Status : Analyzed
Published: 2021-05-14T20:15:16.173
Modified: 2021-07-26T16:21:15.147
Link: CVE-2021-29616
Redhat
No data.