Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Buy Us a Coffee

CVE-2021-29532— Heap out of bounds read in `RaggedCross`

Quick assessment

Affected

tensorflow tensorflow

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Google TensorFlow是美国谷歌（Google）公司的一套用于机器学习的端到端开源平台。 TensorFlow 2.4.2,2.3.3,2.2.3，2.1.4存在缓冲区错误漏洞，攻击者可利用该漏洞可以通过向tf.raw_ops.RaggedCross传递无效的张量值来强制访问堆分配数组的边界之外

CVSS 2.5 · Low EPSS 0.20% · P10 Updated Feb 25, 2026

Possible ATT&CK Techniques 1 AI

T1190 · Exploit Public-Facing Application

Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2021-29532

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

Heap out of bounds read in `RaggedCross`

Source: CVE Program / CVE List V5

Vulnerability Description

TensorFlow is an end-to-end open source platform for machine learning. An attacker can force accesses outside the bounds of heap allocated arrays by passing in invalid tensor values to `tf.raw_ops.RaggedCross`. This is because the implementation(https://github.com/tensorflow/tensorflow/blob/efea03b38fb8d3b81762237dc85e579cc5fc6e87/tensorflow/core/kernels/ragged_cross_op.cc#L456-L487) lacks validation for the user supplied arguments. Each of the above branches call a helper function after accessing array elements via a `*_list[next_*]` pattern, followed by incrementing the `next_*` index. However, as there is no validation that the `next_*` values are in the valid range for the corresponding `*_list` arrays, this results in heap OOB reads. The fix will be included in TensorFlow 2.5.0. We will also cherrypick this commit on TensorFlow 2.4.2, TensorFlow 2.3.3, TensorFlow 2.2.3 and TensorFlow 2.1.4, as these are also affected and still in supported range.

Source: CVE Program / CVE List V5

CVSS Information

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L

Source: CVE Program / CVE List V5

Vulnerability Type

跨界内存读

Source: CVE Program / CVE List V5

Vulnerability Title

Google TensorFlow 缓冲区错误漏洞

Source: CNNVD (China National Vulnerability Database)

Vulnerability Description

Source: CNNVD (China National Vulnerability Database)

CVSS Information

N/A

Source: CNNVD (China National Vulnerability Database)

Vulnerability Type

N/A

Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
tensorflow	tensorflow	< 2.1.4	-

II. Public POCs for CVE-2021-29532

#	POC Description	Source Link	Shenlong Link

AI-Generated POC Premium

No public POC found.

III. Intelligence Information for CVE-2021-29532

请登录查看更多情报信息。

Patches & Fixes for CVE-2021-29532 (1)

https://github.com/tensorflow/tensorflow/commit/44b7f486c0143f68b56c34e2d01e146ee445134a x_refsource_MISC

Vendor Advisories for CVE-2021-29532 (1)

https://github.com/tensorflow/tensorflow/security/advisories/GHSA-j47f-4232-hvv8 x_refsource_CONFIRM

https://www.cve.org/CVERecord?id=CVE-2021-29532

Same Patch Batch · tensorflow · 2021-05-14 · 108 CVEs total

CVE-2021-29591	7.3 HIGH	Stack overflow due to looping TFLite subgraph
CVE-2021-29605	7.1 HIGH	Integer overflow in TFLite memory allocation
CVE-2021-29606	7.1 HIGH	Heap OOB read in TFLite
CVE-2021-29614	7.1 HIGH	Interpreter crash from `tf.io.decode_raw`
CVE-2021-29601	6.3 MEDIUM	Integer overflow in TFLite concatentation
CVE-2021-29613	6.3 MEDIUM	Incomplete validation in `tf.raw_ops.CTCLoss`
CVE-2021-29607	5.3 MEDIUM	Incomplete validation in `SparseSparseMinimum`
CVE-2021-29608	5.3 MEDIUM	Heap OOB and null pointer dereference in `RaggedTensorToTensor`
CVE-2021-29609	5.3 MEDIUM	Incomplete validation in `SparseAdd`
CVE-2021-29571	4.5 MEDIUM	Memory corruption in `DrawBoundingBoxesV2`
CVE-2021-29592	4.4 MEDIUM	Null pointer dereference in TFLite's `Reshape` operator
CVE-2021-29612	3.6 LOW	Heap buffer overflow in `BandedTriangularSolve`
CVE-2021-29611	3.6 LOW	Incomplete validation in `SparseReshape`
CVE-2021-29610	3.6 LOW	Invalid validation in `QuantizeAndDequantizeV2`
CVE-2021-29525	2.5 LOW	Division by 0 in `Conv2DBackpropInput`
CVE-2021-29527	2.5 LOW	Division by 0 in `QuantizedConv2D`
CVE-2021-29584	2.5 LOW	CHECK-fail due to integer overflow
CVE-2021-29583	2.5 LOW	Heap buffer overflow and undefined behavior in `FusedBatchNorm`
CVE-2021-29582	2.5 LOW	Heap OOB read in `tf.raw_ops.Dequantize`
CVE-2021-29572	2.5 LOW	Reference binding to nullptr in `SdcaOptimizer`

Showing top 20 of 108 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: tensorflow

Same vendor: tensorflow

Same weakness: CWE-125