CVE-2021-37680

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

TensorFlow is an end-to-end open source platform for machine learning. In affected versions the implementation of fully connected layers in TFLite is [vulnerable to a division by zero error](https://github.com/tensorflow/tensorflow/blob/460e000de3a83278fb00b61a16d161b1964f15f4/tensorflow/lite/kernels/fully_connected.cc#L226). We have patched the issue in GitHub commit 718721986aa137691ee23f03638867151f74935f. The fix will be included in TensorFlow 2.6.0. We will also cherrypick this commit on TensorFlow 2.5.1, TensorFlow 2.4.3, and TensorFlow 2.3.4, as these are also affected and still in supported range.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-369

Affected software

No affected versions have been published.

Timeline

Published
Aug 12, 2021
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-376817.8TensorFlow is an end-to-end open source platform for machine learning. In affected versions the implementation of SVDF in TFLite is [vulneraCVE-2021-376827.1TensorFlow is an end-to-end open source platform for machine learning. In affected versions all TFLite operations that use quantization can CVE-2021-376835.5TensorFlow is an end-to-end open source platform for machine learning. In affected versions the implementation of division in TFLite is [vulCVE-2021-376845.5TensorFlow is an end-to-end open source platform for machine learning. In affected versions the implementations of pooling in TFLite are vulCVE-2021-376855.5TensorFlow is an end-to-end open source platform for machine learning. In affected versions TFLite's [`expand_dims.cc`](https://github.com/tCVE-2021-376865.5TensorFlow is an end-to-end open source platform for machine learning. In affected versions the strided slice implementation in TFLite has aCVE-2021-376875.5TensorFlow is an end-to-end open source platform for machine learning. In affected versions TFLite's [`GatherNd` implementation](https://gitCVE-2021-376885.5TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can craft a TFLite model that would CVE-2021-376895.5TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can craft a TFLite model that would CVE-2021-37699.8# Vulnerability in `pygmalion`, `pygmalion-virtualenv` and `refined` themes **Description**: these themes use `print -P` on user-supplied stCVE-2021-376906.6TensorFlow is an end-to-end open source platform for machine learning. In affected versions when running shape functions, some functions (suCVE-2021-376915.5TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can craft a TFLite model that would
CVE-2021-37680: Medium severity, CVSS 5.5 | Vulnix