CVE-2021-41205 log

Source
Severity High
Remote No
Type Information disclosure
Description
In TensorFlow before version 2.6.1, the shape inference functions for the QuantizeAndDequantizeV* operations can trigger a read outside of bounds of heap allocated array.
Group Package Affected Fixed Severity Status Ticket
AVG-2529 tensorflow 2.6.0-6 2.6.1-1 High Fixed
References
https://github.com/tensorflow/tensorflow/security/advisories/GHSA-49rx-x2rw-pc6f
https://github.com/tensorflow/tensorflow/commit/7cf73a2274732c9d82af51c2bc2cf90d13cd7e6d