Vulnerability · Published Dec 10, 2020 · Assigned by GitHub_M
CVE-2020-26267Lack of validation in data format attributes in TensorFlow
Medium 4.4
In plain English
A medium-severity out-of-bounds read in tensorflow from tensorflow. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 16% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Official description
In affected versions of TensorFlow the tf.raw_ops.DataFormatVecPermute API does not validate the src_format and dst_format attributes. The code assumes that these two arguments define a permutation of NHWC. This can result in uninitialized memory accesses, read outside of bounds and even crashes. This is fixed in versions 1.15.5, 2.0.4, 2.1.3, 2.2.2, 2.3.2, and 2.4.0.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| PyPI | tensorflow | 2.1.3 | GHSA-c9f3-9wfr-wgh7 |
| PyPI | tensorflow | 2.2.2 | GHSA-c9f3-9wfr-wgh7 |
| PyPI | tensorflow | 2.3.2 | GHSA-c9f3-9wfr-wgh7 |
| PyPI | tensorflow | 1.15.5 | GHSA-c9f3-9wfr-wgh7 |
| PyPI | tensorflow | 1.15.5, 2.0.4, 2.1.3, 2.2.2, 2.3.2 | PYSEC-2020-140 |
| PyPI | tensorflow | 2.0.4 | GHSA-c9f3-9wfr-wgh7 |
| PyPI | tensorflow-cpu | 2.3.2 | GHSA-c9f3-9wfr-wgh7 |
| PyPI | tensorflow-cpu | 1.15.5 | GHSA-c9f3-9wfr-wgh7 |
| PyPI | tensorflow-cpu | 2.0.4 | GHSA-c9f3-9wfr-wgh7 |
| PyPI | tensorflow-cpu | 2.1.3 | GHSA-c9f3-9wfr-wgh7 |
| PyPI | tensorflow-cpu | 2.2.2 | GHSA-c9f3-9wfr-wgh7 |
| PyPI | tensorflow-cpu | 1.15.5, 2.0.4, 2.1.3, 2.2.2, 2.3.2 | PYSEC-2020-298 |
| PyPI | tensorflow-gpu | 2.1.3 | GHSA-c9f3-9wfr-wgh7 |
| PyPI | tensorflow-gpu | 2.2.2 | GHSA-c9f3-9wfr-wgh7 |
| PyPI | tensorflow-gpu | 2.3.2 | GHSA-c9f3-9wfr-wgh7 |
| PyPI | tensorflow-gpu | 1.15.5 | GHSA-c9f3-9wfr-wgh7 |
| PyPI | tensorflow-gpu | 1.15.5, 2.0.4, 2.1.3, 2.2.2, 2.3.2 | PYSEC-2020-333 |
| PyPI | tensorflow-gpu | 2.0.4 | GHSA-c9f3-9wfr-wgh7 |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| tensorflow | tensorflow | < 1.15.5>= 2.0.0, < 2.0.4>= 2.1.0, < 2.1.3>= 2.2.0, < 2.2.2>= 2.3.0, < 2.3.2 |
Weakness: CWE-125 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L