CVE-2021-41207 json
Division by zero in `ParallelConcat`
published 5y ago modified 2mo ago also BIT-tensorflow-2021-41207 , EUVD-2021-0429 , GHSA-7v94-64hj-m82h , PYSEC-2021-399 , PYSEC-2021-616 , PYSEC-2021-814
- cvss
- 5.5
- version 3.1, CNA
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 0.1%
- EPSS 0.1% chance of exploitation in 30 days, percentile 3%
- public exploits
- 0
- none known
Summary
TensorFlow is an open source platform for machine learning. In affected versions the implementation of `ParallelConcat` misses some input validation and can produce a division by 0. The fix will be included in TensorFlow 2.7.0. We will also cherrypick this commit on TensorFlow 2.6.1, TensorFlow 2.5.2, and TensorFlow 2.4.4, as these are also affected and still in supported range.
Patch / fix
- pypi tensorflow 2.4.4, 2.5.2, 2.6.1, 2.7.0
- pypi tensorflow-cpu 2.4.4, 2.5.2, 2.6.1, 2.7.0
- pypi tensorflow-gpu 2.4.4, 2.5.2, 2.6.1, 2.7.0
- bitnami tensorflow 2.4.4, 2.5.2, 2.6.1
- google tensorflow 2.4.4, 2.5.2, 2.6.1
- tensorflow Arch Linux 2.6.1-1
arch linux advisories AVG-2529
Is CVE-2021-41207 in your dependencies? Fencer shows which of your repositories are affected as soon as an advisory lands, and opens the fix as a pull request.
Check with FencerExploit prediction
0.14% chance of exploitation in the next 30 days, higher than 3% of all scored CVEs (FIRST EPSS, 2026-11-09).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| CNA | 3.1 | 5.5 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
| GitHub | 3.1 | 5.5 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
| NVD | 2.0 | 2.1 | AV:L/AC:L/Au:N/C:N/I:N/A:P |
| OSV | 3.1 | 5.5 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Affected packages
| ecosystem | package | affected | fixed in |
|---|---|---|---|
| pypi | tensorflow | >=2.6.0, <2.6.1 >=2.5.0, <2.5.2 <2.4.4 >=2.7.0rc0, <2.7.0 |
2.6.1 2.5.2 2.4.4 2.7.0 |
| pypi | tensorflow-cpu | <2.4.4 >=2.5.0, <2.5.2 >=2.6.0, <2.6.1 >=2.7.0rc0, <2.7.0 |
2.4.4 2.5.2 2.6.1 2.7.0 |
| pypi | tensorflow-gpu | <2.4.4 >=2.5.0, <2.5.2 >=2.6.0, <2.6.1 >=2.7.0rc0, <2.7.0 |
2.4.4 2.5.2 2.6.1 2.7.0 |
| bitnami | tensorflow | >=2.4.0, <2.4.4 >=2.5.0, <2.5.2 >=2.6.0, <2.6.1 |
2.4.4 2.5.2 2.6.1 |
Affected products
- tensorflow tensorflow
Classification
- Weakness
-
- CWE-369 Divide By Zero
References
-
github.com
/tensorflow/tensorflow/commit/f2c3931113eaafe9ef558faaddd48e00a6606235
web, patch, third-party-advisory, advisory
-
github.com
/tensorflow/tensorflow/commit/9de11bdc2cf1284b2f635419bd3e6bbc7643eb2c
web
-
github.com
/tensorflow/tensorflow/commit/d11f21bbdfa54f3576ae860fc927bf23c675ebc0
web
-
github.com
/tensorflow/tensorflow/commit/e67caccea81167402c62977b5c521f2a8b261d6a
web
-
github.com
/tensorflow/tensorflow/security/advisories/GHSA-7v94-64hj-m82h
web, third-party-advisory, advisory
-
nvd.nist.gov
/vuln/detail/CVE-2021-41207
advisory, web
-
github.com
/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-616.yaml
web
-
github.com
/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-814.yaml
web
-
github.com
/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-399.yaml
web
-
github.com
/tensorflow/tensorflow
package
-
github.com
/tensorflow/tensorflow/blob/8d72537c6abf5a44103b57b9c2e22c14f5f49698/tensorflow/core/kernels/inplace_ops.cc#L7
web
Sources
- CVE List CVE-2021-41207
- GitHub Advisory GHSA-7v94-64hj-m82h
- NVD CVE-2021-41207
- OSV BIT-tensorflow-2021-41207
- OSV PYSEC-2021-399
- OSV PYSEC-2021-616
- OSV PYSEC-2021-814
Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.