CVE-2021-37687 log
| Source |
|
| Severity | Medium |
| Remote | No |
| Type | Denial of service |
| Description | In TensorFlow before version 2.6.0 TFLite's GatherNd implementation does not support negative indices but there are no checks for this situation. Hence, an attacker can read arbitrary data from the heap by carefully crafting a model with negative values in indices. Similar issue exists in Gather implementation. |
| Group | Package | Affected | Fixed | Severity | Status | Ticket |
|---|---|---|---|---|---|---|
| AVG-2292 | tensorflow | 2.5.0-6 | 2.5.1-1 | Critical | Fixed |