CVE-2021-37676

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can cause undefined behavior via binding a reference to null pointer in `tf.raw_ops.SparseFillEmptyRows`. The shape inference [implementation](https://github.com/tensorflow/tensorflow/blob/460e000de3a83278fb00b61a16d161b1964f15f4/tensorflow/core/ops/sparse_ops.cc#L608-L634) does not validate that the input arguments are not empty tensors. We have patched the issue in GitHub commit 578e634b4f1c1c684d4b4294f9e5281b2133b3ed. The fix will be included in TensorFlow 2.6.0. We will also cherrypick this commit on TensorFlow 2.5.1, TensorFlow 2.4.3, and TensorFlow 2.3.4, as these are also affected and still in supported range.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-824

Affected software

No affected versions have been published.

Timeline

Published
Aug 12, 2021
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-376775.5TensorFlow is an end-to-end open source platform for machine learning. In affected versions the shape inference code for `tf.raw_ops.DequantCVE-2021-376788.8TensorFlow is an end-to-end open source platform for machine learning. In affected versions TensorFlow and Keras can be tricked to perform aCVE-2021-376797.8TensorFlow is an end-to-end open source platform for machine learning. In affected versions it is possible to nest a `tf.map_fn` within anotCVE-2021-37685.4bookstack is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')CVE-2021-376805.5TensorFlow is an end-to-end open source platform for machine learning. In affected versions the implementation of fully connected layers in CVE-2021-376817.8TensorFlow is an end-to-end open source platform for machine learning. In affected versions the implementation of SVDF in TFLite is [vulneraCVE-2021-376827.1TensorFlow is an end-to-end open source platform for machine learning. In affected versions all TFLite operations that use quantization can CVE-2021-376835.5TensorFlow is an end-to-end open source platform for machine learning. In affected versions the implementation of division in TFLite is [vulCVE-2021-376845.5TensorFlow is an end-to-end open source platform for machine learning. In affected versions the implementations of pooling in TFLite are vulCVE-2021-376855.5TensorFlow is an end-to-end open source platform for machine learning. In affected versions TFLite's [`expand_dims.cc`](https://github.com/tCVE-2021-376865.5TensorFlow is an end-to-end open source platform for machine learning. In affected versions the strided slice implementation in TFLite has aCVE-2021-376875.5TensorFlow is an end-to-end open source platform for machine learning. In affected versions TFLite's [`GatherNd` implementation](https://git
CVE-2021-37676: High severity, CVSS 7.8 | Vulnix