PT-2026-59728 · Pypi · Tensorflow
Published
2026-07-09
·
Updated
2026-07-09
CVSS v3.1
8.8
High
| Vector | AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Impact
TensorFlow is vulnerable to a heap OOB write in [Grappler](https://github.com/tensorflow/tensorflow/blob/a1320ec1eac186da1d03f033109191f715b2b130/tensorflow/core/grappler/costs/graph properties.cc#L1132-L1141):
cc
Status SetUnknownShape(const NodeDef* node, int output port) {
shape inference::ShapeHandle shape =
GetUnknownOutputShape(node, output port);
InferenceContext* ctx = GetContext(node);
if (ctx == nullptr) {
return errors::InvalidArgument("Missing context");
}
ctx->set output(output port, shape);
return Status::OK();
}The [
set output](https://github.com/tensorflow/tensorflow/blob/a1320ec1eac186da1d03f033109191f715b2b130/tensorflow/core/framework/shape inference.h#L394) function writes to an array at the specified index:cc
void set output(int idx, ShapeHandle shape) { outputs .at(idx) = shape; }Hence, this gives a malicious user a write primitive.
Patches
We have patched the issue in GitHub commit 97282c6d0d34476b6ba033f961590b783fa184cd.
The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on TensorFlow 2.7.1, TensorFlow 2.6.3, and TensorFlow 2.5.3, as these are also affected and still in supported range.
For more information
Please consult our security guide for more information regarding the security model and how to contact us with issues and questions.
Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Tensorflow