CVE-2021-29595: Division by zero in TFLite's implementation of `DepthToSpace`

(updated )

The implementation of the DepthToSpace TFLite operator is vulnerable to a division by zero error:

const int block_size = params->block_size;
...
const int input_channels = input->dims->data[3];
...
int output_channels = input_channels / block_size / block_size;

An attacker can craft a model such that params->block_size is 0.

References

Code Behaviors & Features

Detect and mitigate CVE-2021-29595 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →