
Cloud Vulnerability DB
A community-led vulnerabilities database
TensorFlow, an end-to-end open source platform for machine learning, contained a vulnerability in its TFLite implementation of division operations (CVE-2021-37683). The vulnerability was discovered in versions prior to 2.6.0, where the division operation lacked proper validation checks for zero elements in the divisor tensor, potentially leading to division by zero errors (GitHub Advisory).
The vulnerability existed in the TFLite division implementation where there was no validation to ensure the divisor tensor did not contain zero elements. This implementation flaw could be exploited by crafting a specific TFLite model that would trigger a division by zero error. The issue was present in the division operation code located in the TensorFlow codebase (TF Commit).
When exploited, this vulnerability could lead to a division by zero error, potentially causing application crashes and resulting in denial of service conditions. This could affect applications using TensorFlow Lite for inference operations (GitHub Advisory).
The vulnerability was patched in multiple versions of TensorFlow: version 2.6.0 and backported to versions 2.5.1, 2.4.3, and 2.3.4. The fix involves adding proper validation checks for zero elements in the divisor tensor before performing division operations (GitHub Advisory, TF Commit).
Source: This report was generated using AI
Free Vulnerability Assessment
Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.
Get a personalized demo
"Best User Experience I have ever seen, provides full visibility to cloud workloads."
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
"We know that if Wiz identifies something as critical, it actually is."