CVE-2021-37683
Python vulnerability analysis and mitigation

Overview

TensorFlow, an end-to-end open source platform for machine learning, contained a vulnerability in its TFLite implementation of division operations (CVE-2021-37683). The vulnerability was discovered in versions prior to 2.6.0, where the division operation lacked proper validation checks for zero elements in the divisor tensor, potentially leading to division by zero errors (GitHub Advisory).

Technical details

The vulnerability existed in the TFLite division implementation where there was no validation to ensure the divisor tensor did not contain zero elements. This implementation flaw could be exploited by crafting a specific TFLite model that would trigger a division by zero error. The issue was present in the division operation code located in the TensorFlow codebase (TF Commit).

Impact

When exploited, this vulnerability could lead to a division by zero error, potentially causing application crashes and resulting in denial of service conditions. This could affect applications using TensorFlow Lite for inference operations (GitHub Advisory).

Mitigation and workarounds

The vulnerability was patched in multiple versions of TensorFlow: version 2.6.0 and backported to versions 2.5.1, 2.4.3, and 2.3.4. The fix involves adding proper validation checks for zero elements in the divisor tensor before performing division operations (GitHub Advisory, TF Commit).

Additional resources


SourceThis report was generated using AI

Related Python vulnerabilities:

CVE ID

Severity

Score

Technologies

Component name

CISA KEV exploit

Has fix

Published date

CVE-2025-67511CRITICAL9.6
  • PythonPython
  • cai-framework
NoNoDec 09, 2025
CVE-2025-66645HIGH7.5
  • PythonPython
  • nicegui
NoYesDec 09, 2025
GHSA-9rwj-6rc7-p77cHIGH7.3
  • PythonPython
  • langgraph-checkpoint-sqlite
NoYesDec 10, 2025
CVE-2025-67502MEDIUM5.4
  • PythonPython
  • taguette
NoYesDec 10, 2025
CVE-2025-67485MEDIUM5.3
  • PythonPython
  • mad-proxy
NoNoDec 09, 2025

Free Vulnerability Assessment

Benchmark your Cloud Security Posture

Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.

Request assessment

Get a personalized demo

Ready to see Wiz in action?

"Best User Experience I have ever seen, provides full visibility to cloud workloads."
David EstlickCISO
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
Adam FletcherChief Security Officer
"We know that if Wiz identifies something as critical, it actually is."
Greg PoniatowskiHead of Threat and Vulnerability Management