| Package | Affected versions | Patched versions |
|---|---|---|
| tensorflow | < 2.4.0 | 2.4.0 |
| tensorflow-cpu | < 2.4.0 | 2.4.0 |
| tensorflow-gpu | < 2.4.0 | 2.4.0 |
| tensorflow | < 2.4.0 | 2.4.0 |
When the boxes argument of tf.image.crop_and_resize has a very large value, the CPU kernel implementation receives it as a C++ nan floating point value. Attempting to operate on this is undefined behavior which later produces a segmentation fault.
We have patched the issue in c0319231333f0f16e1cc75ec83660b01fedd4182 and will release TensorFlow 2.4.0 containing the patch. TensorFlow nightly packages after this commit will also have the issue resolved.
Please consult our security guide for more information regarding the security model and how to contact us with issues and questions.
This vulnerability has been reported in #42129
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free