CVE-2020-15195

Heap buffer overflow in Tensorflow

State: Published
Severity: 8.5 High
Published: Sep 25, 2020
Updated: Aug 4, 2024
Reserved: Jun 25, 2020

Description

In Tensorflow before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1, the implementation of `SparseFillEmptyRowsGrad` uses a double indexing pattern. It is possible for `reverse_index_map(i)` to be an index outside of bounds of `grad_values`, thus resulting in a heap buffer overflow. The issue is patched in commit 390611e0d45c5793c7066110af37c8514e6a6c54, and is released in TensorFlow versions 1.15.4, 2.0.3, 2.1.2, 2.2.1, or 2.3.1.

Scores

CVSS	Score	Vector	Source
3.1	8.5 High	CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H	GitHub_M

Weaknesses

CWE-119 {"CWE-119":"Improper Restriction of Operations within the Bounds of a Memory Buffer"}
CWE-122 {"CWE-122":"Heap-based Buffer Overflow"}

Affected Products

Product	Versions
tensorflowtensorflow	< 1.15.4Affected >= 2.0.0, < 2.0.3Affected >= 2.1.0, < 2.1.2Affected >= 2.2.0, < 2.2.1Affected >= 2.3.0, < 2.3.1Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.