CVE-2021-37669: Denial of Service in TensorFlow
Summary
CVE-2021-37669: TensorFlow is an end-to-end open source platform for machine learning. Affects tensorflow-cpu across 4 version ranges.
>= 2.3.0, < 2.3.4
>= 2.4.0, < 2.4.3
< 3a7362750d5c372420aa8f0caf7bf5b5c3d0f52d
< b5cdbf12ffcaaffecf98f22a6be5a64bb96e4f58
Fixed in 2.3.4 or 2.4.3, depending on the release line you run. How to fix ↓
Also tracked for
- tensorflow · Bitnami
- tensorflow · PyPI
- tensorflow · PyPI
- tensorflow-gpu · PyPI
The same CVE-2021-37669 is tracked separately for each ecosystem and vendor. Its fix information is the same; the package and affected versions differ.
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
TensorFlow is an end-to-end open source platform for machine learning. It provides a comprehensive ecosystem of tools, libraries, and resources for developing and deploying machine learning models. TensorFlow is widely used in various industries and research fields for tasks such as image recognition, natural language processing, and recommendation systems. However, a vulnerability has been discovered in TensorFlow that can lead to a denial of service (DoS) attack.
Vulnerability Detail
The vulnerability (CVE-2021-37669) in TensorFlow affects applications serving models using the tf.raw_ops.NonMaxSuppressionV5 function. By triggering a division by 0, an attacker can cause a crash and disrupt the availability of the application. The vulnerability arises from the improper handling of user-controlled input during the resizing of a std::vector in the implementation of the function. If a negative value is supplied by the attacker, it results in a conversion to an unsigned value, leading to a crash. A similar issue exists in the CombinedNonMaxSuppression function. This vulnerability can be exploited remotely and may have serious consequences for applications relying on TensorFlow for machine learning tasks.
How To Fix
Latest published version: 2.21.0 as of 22 Oct 2026
pip install --upgrade "tensorflow-cpu==2.21.0"Upgrading to it may include breaking changes; the versions below are the minimum fixed release for this vulnerability.
If you can't move to the latest
The minimum fixed version depends on the release line you run.
-
>= 2.3.0, < 2.3.42.3.4pip install --upgrade "tensorflow-cpu==2.3.4" -
>= 2.4.0, < 2.4.32.4.3pip install --upgrade "tensorflow-cpu==2.4.3"
Tip — Not sure which release line you're on? Vulert can find the fix for the version you are using. Scan free →
Workaround
There is no specific workaround provided for this vulnerability. The recommended course of action is to apply the patch or update to the fixed version of TensorFlow as soon as it is available.
Conclusion
The vulnerability (CVE-2021-37669) in TensorFlow can lead to a denial of service (DoS) attack by triggering a division by 0. It is crucial to update to the patched version of TensorFlow (2.6.0) or apply the backported fixes for older supported versions (2.5.1, 2.4.3, and 2.3.4) to mitigate the risk. For further assistance and support in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for tensorflow-cpu →
FAQ
TensorFlow is an open source platform for machine learning that provides tools and libraries for developing and deploying machine learning models.
The vulnerability can be exploited remotely to cause a denial of service (DoS) attack, leading to application crashes and disruption of service.
To fix the vulnerability, it is recommended to update to the patched version of TensorFlow (2.6.0) or apply the backported fixes for older supported versions (2.5.1, 2.4.3, and 2.3.4) when they become available.
No specific workaround is provided. Applying the patch or updating to the fixed version is the recommended solution.
Yes, the vulnerability can be exploited remotely, making it a potential target for attackers.
References
Related vulnerabilities
Recent vulnerabilities recorded for tensorflow-cpu.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
