QID 981514
QID 981514: Python (pip) Security Update for tensorflow-gpu (GHSA-9w2p-5mgw-p94c)
Security update has been released for tensorflow-gpu,tensorflow,tensorflow-cpu to fix the vulnerability.
Note: The preceding description block is extracted directly from the security advisory. Using automation, we have attempted to clean and format it as much as possible without introducing additional issues.
The implementation of `tf.raw_ops.QuantizeAndDequantizeV4Grad` is vulnerable to an integer overflow issue caused by converting a signed integer value to an unsigned one and then allocating memory based on this value.
```python
import tensorflow as tf
tf.raw_ops.QuantizeAndDequantizeV4Grad(
gradients=[1.0,2.0],
input=[1.0,1.0],
input_min=[0.0],
input_max=[10.0],
axis=-100)
```
The [implementation](https://github.com/tensorflow/tensorflow/blob/8d72537c6abf5a44103b57b9c2e22c14f5f49698/tensorflow/core/kernels/quantize_and_dequantize_op.cc#L126) uses the `axis` value as the size argument to `absl::InlinedVector` constructor. But, the constructor uses an unsigned type for the argument, so the implicit conversion transforms the negative value to a large integer.
The fix will be included in TensorFlow 2.6.0. We will also cherrypick this commit on TensorFlow 2.5.1, and TensorFlow 2.4.3, as these are also affected and still in supported range.
- GHSA-9w2p-5mgw-p94c -
github.com/advisories/GHSA-9w2p-5mgw-p94c
CVEs related to QID 981514
| Advisory ID | Software | Component | Link |
|---|---|---|---|
| GHSA-9w2p-5mgw-p94c | tensorflow |
|
|
| GHSA-9w2p-5mgw-p94c | tensorflow-cpu |
|
|
| GHSA-9w2p-5mgw-p94c | tensorflow-gpu |
|