---

CVE-2021-37681 - log back

CVE-2021-37681 created at 13 Aug 2021 07:57:57
Severity	+ High
Remote	+ Local
Type	+ Denial of service
Description	+ In TensorFlow before version 2.6.0 the implementation of SVDF in TFLite is vulnerable to a null pointer error. The GetVariableInput function can return a null pointer but GetTensorData assumes that the argument is always a valid tensor. Furthermore, because GetVariableInput calls GetMutableInput which might return nullptr, the tensor->is_variable expression can also trigger a null pointer exception.
References	+ https://github.com/tensorflow/tensorflow/security/advisories/GHSA-7xwj-5r4v-429p + https://github.com/tensorflow/tensorflow/commit/5b048e87e4e55990dae6b547add4dae59f4e1c76
Notes