2.5

CVSS Score

3.1

Basic Information

CVE ID

CVE-2021-29539

GHSA ID

GHSA-g4h2-gqm3-c9wq

EPSS Score

0.01803%

CWE

CWE-681

Published

5/21/2021

Updated

10/30/2024

KEV Status

Technology

Python

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

CVE-2021-29539

CVE-2021-29539: Segfault in tf.raw_ops.ImmutableConst

Impact

Calling tf.raw_ops.ImmutableConst with a dtype of tf.resource or tf.variant results in a segfault in the implementation as code assumes that the tensor contents are pure scalars.

>>> import tensorflow as tf
>>> tf.raw_ops.ImmutableConst(dtype=tf.resource, shape=[], memory_region_name="/tmp/test.txt")
...
Segmentation fault

Patches

We have patched the issue in 4f663d4b8f0bec1b48da6fa091a7d29609980fa4 and will release TensorFlow 2.5.0 containing the patch. TensorFlow nightly packages after this commit will also have the issue resolved.

Workarounds

If using tf.raw_ops.ImmutableConst in code, you can prevent the segfault by inserting a filter for the dtype argument.

For more information

Please consult our security guide for more information regarding the security model and how to contact us with issues and questions.

(GitHub Advisory)

2.5

CVSS Score

3.1

Basic Information

CVE ID

CVE-2021-29539

GHSA ID

GHSA-g4h2-gqm3-c9wq

EPSS Score

0.01803%

CWE

CWE-681

Published

5/21/2021

Updated

10/30/2024

KEV Status

Technology

Python

Technical Details

CVSS Vector

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L

Package Name	Ecosystem	Vulnerable Versions	First Patched Version
tensorflow	pip	< 2.1.4	2.1.4
tensorflow	pip	>= 2.2.0, < 2.2.3	2.2.3
tensorflow	pip	>= 2.3.0, < 2.3.3	2.3.3
tensorflow	pip	>= 2.4.0, < 2.4.2	2.4.2
tensorflow-cpu	pip	< 2.1.4	2.1.4
tensorflow-cpu	pip	>= 2.2.0, < 2.2.3	2.2.3
tensorflow-cpu	pip	>= 2.3.0, < 2.3.3	2.3.3
tensorflow-cpu	pip	>= 2.4.0, < 2.4.2	2.4.2
tensorflow-gpu	pip	< 2.1.4	2.1.4
tensorflow-gpu	pip	>= 2.2.0, < 2.2.3	2.2.3
tensorflow-gpu	pip	>= 2.3.0, < 2.3.3	2.3.3
tensorflow-gpu	pip	>= 2.4.0, < 2.4.2	2.4.2

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The vulnerability stems from the ImmutableConstantOp constructor's failure to validate() prohibited dtypes (resource/variant). The patch explicitly adds an OP_REQUIRES check for these dtypes, confirming this was the vulnerable code path. The file modification in the commit directly addresses this missing validate() in the constructor.

Vulnerable functions

Only Mi**o us*rs **n s** t*is s**tion

WAF Protection Rules

WAF Rule

### Imp**t **llin* [`t*.r*w_ops.Immut**l**onst`](*ttps://www.t*nsor*low.or*/*pi_*o*s/pyt*on/t*/r*w_ops/Immut**l**onst) wit* * `*typ*` o* `t*.r*sour**` or `t*.v*ri*nt` r*sults in * s****ult in t** impl*m*nt*tion *s *o** *ssum*s t**t t** t*nsor *ont*nt

Reasoning

T** vuln*r**ility st*ms *rom t** `Immut**l**onst*ntOp` *onstru*tor's **ilur* to `v*li**t*()` pro*i*it** *typ*s (r*sour**/v*ri*nt). T** p*t** *xpli*itly ***s *n `OP_R*QUIR*S` ****k *or t**s* *typ*s, *on*irmin* t*is w*s t** vuln*r**l* *o** p*t*. T** *i

2.5

Basic Information

Concerned about an active attack path?

CVE-2021-29539: Segfault in tf.raw_ops.ImmutableConst

Impact

Patches

Workarounds

For more information

2.5

Basic Information

Technical Details

Vulnerability IntelligenceMiggo AI

Root Cause Analysis

Vulnerable functions

WAF Protection Rules

WAF Rule

Reasoning

Vulnerability Intelligence
Miggo AI