Loading HuntDB...

GHSA-9p77-mmrw-69c7

GitHub Security Advisory

Null-dereference in Tensorflow

✓ GitHub Reviewed HIGH Has CVE

Advisory Details

### Impact
When decoding a tensor from protobuf, TensorFlow might do a null-dereference if attributes of some mutable arguments to some operations are missing from the proto. This is [guarded by a `DCHECK`](https://github.com/tensorflow/tensorflow/blob/a1320ec1eac186da1d03f033109191f715b2b130/tensorflow/core/framework/full_type_util.cc#L104-L106):

```cc
const auto* attr = attrs.Find(arg->s());
DCHECK(attr != nullptr);
if (attr->value_case() == AttrValue::kList) {
// ...
}
```
However, `DCHECK` is a no-op in production builds and an assertion failure in debug builds. In the first case execution proceeds to the dereferencing of the null pointer, whereas in the second case it results in a crash due to the assertion failure.

### Patches
We have patched the issue in GitHub commit [8a513cec4bec15961fbfdedcaa5376522980455c](https://github.com/tensorflow/tensorflow/commit/8a513cec4bec15961fbfdedcaa5376522980455c).

The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, and TensorFlow 2.6.3, as these are also affected and still in supported range.

### For more information
Please consult [our security guide](https://github.com/tensorflow/tensorflow/blob/master/SECURITY.md) for more information regarding the security model and how to contact us with issues and questions.

Affected Packages

PyPI tensorflow
Affected versions: 0 (fixed in 2.5.3)
PyPI tensorflow
Affected versions: 2.6.0 (fixed in 2.6.3)
PyPI tensorflow
Affected versions: 2.7.0 (fixed in 2.7.1)
PyPI tensorflow-cpu
Affected versions: 0 (fixed in 2.5.3)
PyPI tensorflow-cpu
Affected versions: 2.6.0 (fixed in 2.6.3)
PyPI tensorflow-cpu
Affected versions: 2.7.0 (fixed in 2.7.1)
PyPI tensorflow-gpu
Affected versions: 0 (fixed in 2.5.3)
PyPI tensorflow-gpu
Affected versions: 2.6.0 (fixed in 2.6.3)
PyPI tensorflow-gpu
Affected versions: 2.7.0 (fixed in 2.7.1)

Related CVEs

Key Information

GHSA ID
GHSA-9p77-mmrw-69c7
Published
February 9, 2022 11:33 PM
Last Modified
November 13, 2024 10:45 PM
CVSS Score
7.5 /10
Primary Ecosystem
PyPI
Primary Package
tensorflow
GitHub Reviewed
✓ Yes

Dataset

Last updated: September 12, 2025 6:34 AM

Data from GitHub Advisory Database. This information is provided for research and educational purposes.