Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Buy Us a Coffee

CVE-2021-29590— Heap OOB read in TFLite's implementation of `Minimum` or `Maximum`

Quick assessment

Affected

tensorflow tensorflow

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Google TensorFlow是美国谷歌（Google）公司的一套用于机器学习的端到端开源平台。 TensorFlow 2.4.2,2.3.3,2.2.3，2.1.4存在安全漏洞，该漏洞源于Minimum和Maximum TFLite操作符的实现可以用于读取堆分配对象边界之外的数据，如果两个输入张量参数中的任何一个是空的。这是因为索引无法验证索引是否在范围内。

CVSS 2.5 · Low EPSS 0.20% · P10 Updated Feb 25, 2026

Possible ATT&CK Techniques 1 AI

T1190 · Exploit Public-Facing Application

Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2021-29590

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

Heap OOB read in TFLite's implementation of `Minimum` or `Maximum`

Source: CVE Program / CVE List V5

Vulnerability Description

TensorFlow is an end-to-end open source platform for machine learning. The implementations of the `Minimum` and `Maximum` TFLite operators can be used to read data outside of bounds of heap allocated objects, if any of the two input tensor arguments are empty. This is because the broadcasting implementation(https://github.com/tensorflow/tensorflow/blob/0d45ea1ca641b21b73bcf9c00e0179cda284e7e7/tensorflow/lite/kernels/internal/reference/maximum_minimum.h#L52-L56) indexes in both tensors with the same index but does not validate that the index is within bounds. The fix will be included in TensorFlow 2.5.0. We will also cherrypick this commit on TensorFlow 2.4.2, TensorFlow 2.3.3, TensorFlow 2.2.3 and TensorFlow 2.1.4, as these are also affected and still in supported range.

Source: CVE Program / CVE List V5

CVSS Information

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L

Source: CVE Program / CVE List V5

Vulnerability Type

跨界内存读

Source: CVE Program / CVE List V5

Vulnerability Title

Google TensorFlow 缓冲区错误漏洞

Source: CNNVD (China National Vulnerability Database)

Vulnerability Description

Source: CNNVD (China National Vulnerability Database)

CVSS Information

N/A

Source: CNNVD (China National Vulnerability Database)

Vulnerability Type

N/A

Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
tensorflow	tensorflow	< 2.1.4	-

II. Public POCs for CVE-2021-29590

#	POC Description	Source Link	Shenlong Link

AI-Generated POC Premium

No public POC found.

III. Intelligence Information for CVE-2021-29590

请登录查看更多情报信息。

Patches & Fixes for CVE-2021-29590 (1)

https://github.com/tensorflow/tensorflow/commit/953f28dca13c92839ba389c055587cfe6c723578 x_refsource_MISC

Vendor Advisories for CVE-2021-29590 (1)

https://github.com/tensorflow/tensorflow/security/advisories/GHSA-24x6-8c7m-hv3f x_refsource_CONFIRM

https://www.cve.org/CVERecord?id=CVE-2021-29590

Same Patch Batch · tensorflow · 2021-05-14 · 108 CVEs total

CVE-2021-29591	7.3 HIGH	Stack overflow due to looping TFLite subgraph
CVE-2021-29605	7.1 HIGH	Integer overflow in TFLite memory allocation
CVE-2021-29606	7.1 HIGH	Heap OOB read in TFLite
CVE-2021-29614	7.1 HIGH	Interpreter crash from `tf.io.decode_raw`
CVE-2021-29601	6.3 MEDIUM	Integer overflow in TFLite concatentation
CVE-2021-29613	6.3 MEDIUM	Incomplete validation in `tf.raw_ops.CTCLoss`
CVE-2021-29607	5.3 MEDIUM	Incomplete validation in `SparseSparseMinimum`
CVE-2021-29609	5.3 MEDIUM	Incomplete validation in `SparseAdd`
CVE-2021-29608	5.3 MEDIUM	Heap OOB and null pointer dereference in `RaggedTensorToTensor`
CVE-2021-29571	4.5 MEDIUM	Memory corruption in `DrawBoundingBoxesV2`
CVE-2021-29592	4.4 MEDIUM	Null pointer dereference in TFLite's `Reshape` operator
CVE-2021-29610	3.6 LOW	Invalid validation in `QuantizeAndDequantizeV2`
CVE-2021-29611	3.6 LOW	Incomplete validation in `SparseReshape`
CVE-2021-29612	3.6 LOW	Heap buffer overflow in `BandedTriangularSolve`
CVE-2021-29572	2.5 LOW	Reference binding to nullptr in `SdcaOptimizer`
CVE-2021-29575	2.5 LOW	Overflow/denial of service in `tf.raw_ops.ReverseSequence`
CVE-2021-29528	2.5 LOW	Division by 0 in `QuantizedMul`
CVE-2021-29584	2.5 LOW	CHECK-fail due to integer overflow
CVE-2021-29570	2.5 LOW	Heap out of bounds read in `MaxPoolGradWithArgmax`
CVE-2021-29526	2.5 LOW	Division by 0 in `Conv2D`

Showing top 20 of 108 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: tensorflow

Same vendor: tensorflow

Same weakness: CWE-125