---

CVE-2021-41226 - log back

CVE-2021-41226 created at 06 Nov 2021 00:15:17
Severity	+ High
Remote	+ Local
Type	+ Arbitrary code execution
Description	+ In TensorFlow before version 2.6.1, the implementation of SparseBinCount is vulnerable to a heap OOB access. This is because of missing validation between the elements of the values argument and the shape of the sparse output.
References	+ https://github.com/tensorflow/tensorflow/security/advisories/GHSA-374m-jm66-3vj8 + https://github.com/tensorflow/tensorflow/commit/f410212e373eb2aec4c9e60bf3702eba99a38aba
Notes