7.8

CVSS Score

3.1

Basic Information

CVE ID

CVE-2021-37666

GHSA ID

GHSA-w4xf-2pqw-5mq7

EPSS Score

0.00931%

CWE

CWE-824

Published

8/25/2021

Updated

11/13/2024

KEV Status

Technology

Python

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

CVE-2021-37666

CVE-2021-37666: Reference binding to nullptr in `RaggedTensorToVariant`

Impact

An attacker can cause undefined behavior via binding a reference to null pointer in tf.raw_ops.RaggedTensorToVariant:

import tensorflow as tf

tf.raw_ops.RaggedTensorToVariant(
  rt_nested_splits=[],
  rt_dense_values=[1,2,3],
  batched_input=True)

The implementation has an incomplete validation of the splits values, missing the case when the argument would be empty.

Patches

We have patched the issue in GitHub commit be7a4de6adfbd303ce08be4332554dff70362612.

The fix will be included in TensorFlow 2.6.0. We will also cherrypick this commit on TensorFlow 2.5.1, TensorFlow 2.4.3, and TensorFlow 2.3.4, as these are also affected and still in supported range.

For more information

Please consult our security guide for more information regarding the security model and how to contact us with issues and questions.

Attribution

This vulnerability has been reported by members of the Aivul Team from Qihoo 360.

(GitHub Advisory)

7.8

CVSS Score

3.1

Basic Information

CVE ID

CVE-2021-37666

GHSA ID

GHSA-w4xf-2pqw-5mq7

EPSS Score

0.00931%

CWE

CWE-824

Published

8/25/2021

Updated

11/13/2024

KEV Status

Technology

Python

Technical Details

CVSS Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Package Name	Ecosystem	Vulnerable Versions	First Patched Version
tensorflow	pip	< 2.3.4	2.3.4
tensorflow	pip	>= 2.4.0, < 2.4.3	2.4.3
tensorflow	pip	= 2.5.0	2.5.1
tensorflow-cpu	pip	< 2.3.4	2.3.4
tensorflow-cpu	pip	>= 2.4.0, < 2.4.3	2.4.3
tensorflow-cpu	pip	= 2.5.0	2.5.1
tensorflow-gpu	pip	< 2.3.4	2.3.4
tensorflow-gpu	pip	>= 2.4.0, < 2.4.3	2.4.3
tensorflow-gpu	pip	= 2.5.0	2.5.1

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The vulnerability stems from the Compute method of RaggedTensorToVariantOp where validation of rt_nested_splits was incomplete. The commit diff shows the addition of a critical check (OP_REQUIRES) for non-empty splits in this function. Prior to the patch, the absence of this check allowed empty input to pass through, leading to undefined behavior when accessing potentially invalid splits data structures. The direct correlation between the vulnerability description, CWE-824 (uninitialized pointer access), and the patched code location confirms this function as the vulnerable component.

Vulnerable functions

Only Mi**o us*rs **n s** t*is s**tion

WAF Protection Rules

WAF Rule

### Imp**t *n *tt**k*r **n **us* un***in** ****vior vi* *in*in* * r***r*n** to null point*r in `t*.r*w_ops.R*****T*nsorToV*ri*nt`: ```pyt*on import t*nsor*low *s t* t*.r*w_ops.R*****T*nsorToV*ri*nt( rt_n*st**_splits=[], rt_**ns*_v*lu*s=[*,*,*],

Reasoning

T** vuln*r**ility st*ms *rom t** *omput* m*t*o* o* R*****T*nsorToV*ri*ntOp w**r* v*li**tion o* rt_n*st**_splits w*s in*ompl*t*. T** *ommit *i** s*ows t** ***ition o* * *riti**l ****k (OP_R*QUIR*S) *or non-*mpty splits in t*is *un*tion. Prior to t** p

7.8

Basic Information

Concerned about an active attack path?

CVE-2021-37666: Reference binding to nullptr in `RaggedTensorToVariant`

Impact

Patches

For more information

Attribution

7.8

Basic Information

Technical Details

Vulnerability IntelligenceMiggo AI

Root Cause Analysis

Vulnerable functions

WAF Protection Rules

WAF Rule

Reasoning

Vulnerability Intelligence
Miggo AI