| Package | Affected versions | Patched versions |
|---|---|---|
| tensorflow | ≥ 2.8.0, < 2.8.1≥ 2.9.0, < 2.9.2< 2.7.2 | 2.8.12.9.22.7.2 |
| tensorflow-cpu | ≥ 2.8.0, < 2.8.1≥ 2.9.0, < 2.9.2< 2.7.2 | 2.8.12.9.22.7.2 |
| tensorflow-gpu | ≥ 2.8.0, < 2.8.1≥ 2.9.0, < 2.9.2< 2.7.2 | 2.8.12.9.22.7.2 |
| tensorflow | = 2.10≥ 2.7.0, < 2.7.2≥ 2.8.0, < 2.8.1≥ 2.9.0, < 2.9.1 | 2.7.22.8.12.9.1 |
The AvgPoolOp function takes an argument ksize that must be positive but is not checked. A negative ksize can trigger a CHECK failure and crash the program.
import tensorflow as tf
import numpy as np
value = np.ones([1, 1, 1, 1])
ksize = [1, 1e20, 1, 1]
strides = [1, 1, 1, 1]
padding = 'SAME'
data_format = 'NHWC'
tf.raw_ops.AvgPool(value=value, ksize=ksize, strides=strides, padding=padding, data_format=data_format)
We have patched the issue in GitHub commit 3a6ac52664c6c095aa2b114e742b0aa17fdce78f.
The fix will be included in TensorFlow 2.10.0. We will also cherrypick this commit on TensorFlow 2.9.1, TensorFlow 2.8.1, and TensorFlow 2.7.2, as these are also affected and still in supported range.
Please consult our security guide for more information regarding the security model and how to contact us with issues and questions.
This vulnerability has been reported by Jingyi Shi.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free