CVE-2020-15198CWE-119CWE-122

Heap buffer overflow in Tensorflow

Medium · published September 25, 2020

CVSS v3.1
5.4
EPSS
1%
Percentile
44.8
In the wild
Unconfirmed
What it is

In Tensorflow before version 2.3.1, the `SparseCountSparseOutput` implementation does not validate that the input arguments form a valid sparse tensor. In particular, there is no validation that the `indices` tensor has the same shape as the `values` one. The values in these tensors are always accessed in parallel. Thus, a shape mismatch can result in accesses outside the bounds of heap allocated buffers. The issue is patched in commit 3cbb917b4714766030b28eba9fb41bb97ce9ee02 and is released in TensorFlow version 2.3.1.

The record
Technical detail
CVSS v3.1
5.4 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00542 · 44.8th percentile
Weaknesses
CWE-119 · Improper Restriction of Operations within the Bounds of a Memory Buffer; CWE-122 · Heap-based Buffer Overflow
Published
2020-09-25T18:40Z
EPSS history
Timeline
  • 25 SEP 18:40Z
    Heap buffer overflow in Tensorflow
    cvelistv5