VULNERABILITY INTELLIGENCE
CVE-2021-29618
CVSS score2.5 LOW
EPSS probability0.23%
CISA KEVNot currently listed
Published2021-05-14
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L
Description
TensorFlow is an end-to-end open source platform for machine learning. Passing a complex argument to `tf.transpose` at the same time as passing `conjugate=True` argument results in a crash. The fix will be included in TensorFlow 2.5.0. We will also cherrypick this commit on TensorFlow 2.4.2, TensorFlow 2.3.3, TensorFlow 2.2.3 and TensorFlow 2.1.4, as these are also affected and still in supported range.
Weakness classification
- security-advisories@github.com: CWE-755
Primary references
- security-advisories@github.com — Broken Link
- security-advisories@github.com — Broken Link
- security-advisories@github.com — Patch, Third Party Advisory
- security-advisories@github.com — Exploit, Patch, Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Broken Link
- af854a3a-2127-422b-91ae-364da2661108 — Broken Link
- af854a3a-2127-422b-91ae-364da2661108 — Patch, Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Exploit, Patch, Third Party Advisory