CVE-2021-41210: TensorFlow GPU - Out-of-Bounds Read in SparseCountSparseOutput Shape Inference
Summary
CVE-2021-41210: TensorFlow is an open source platform for machine learning. Affects tensorflow-gpu across 5 version ranges.
< 2.4.4
>= 2.5.0, < 2.5.2
>= 2.6.0, < 2.6.1
>= 2.7.0rc0, < 2.7.0
< 701cfaca222a82afbeeb17496bd718baa65a67d2
Fixed in 4 releases; the minimum fixed version depends on the release line you run. How to fix ↓
Also tracked for
- tensorflow · Bitnami
- tensorflow · PyPI
- tensorflow · PyPI
- tensorflow-cpu · PyPI
The same CVE-2021-41210 is tracked separately for each ecosystem and vendor. Its fix information is the same; the package and affected versions differ.
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
TensorFlow is an open-source platform for machine learning. It provides a comprehensive ecosystem of tools, libraries, and resources for developing and deploying machine learning models. TensorFlow GPU is a specific package that enables GPU acceleration for TensorFlow computations. It allows users to leverage the power of GPUs to accelerate training and inference processes in machine learning models.
Vulnerability Detail
The vulnerability identified as CVE-2021-41210 affects TensorFlow GPU versions prior to 2.7.0. It resides in the shape inference functions for SparseCountSparseOutput, which can trigger a read outside the bounds of a heap-allocated array. This out-of-bounds read can lead to memory corruption and potentially enable an attacker to execute arbitrary code or cause a denial-of-service condition. The issue was discovered and reported by the TensorFlow security team. To address this vulnerability, the TensorFlow development team has released fixes in TensorFlow 2.7.0 and backported them to TensorFlow 2.6.1, TensorFlow 2.5.2, and TensorFlow 2.4.4, which are still within the supported range.
How To Fix
Latest published version: 2.12.0 as of 22 Oct 2026
pip install --upgrade "tensorflow-gpu==2.12.0"Upgrading to it may include breaking changes; the versions below are the minimum fixed release for this vulnerability.
If you can't move to the latest
The minimum fixed version depends on the release line you run.
-
< 2.4.42.4.4pip install --upgrade "tensorflow-gpu==2.4.4" -
>= 2.5.0, < 2.5.22.5.2pip install --upgrade "tensorflow-gpu==2.5.2" -
>= 2.6.0, < 2.6.12.6.1pip install --upgrade "tensorflow-gpu==2.6.1" -
>= 2.7.0rc0, < 2.7.02.7.0pip install --upgrade "tensorflow-gpu==2.7.0"
Tip — Not sure which release line you're on? Vulert can find the fix for the version you are using. Scan free →
Workaround
There is no known workaround available for this vulnerability. It is strongly advised to apply the official fixes or upgrade to the patched versions of TensorFlow GPU.
Conclusion
In conclusion, the vulnerability CVE-2021-41210 in TensorFlow GPU versions prior to 2.7.0 poses a risk of memory corruption and potential code execution or denial-of-service attacks. Users are strongly advised to upgrade to the patched versions or apply the official fixes provided by the TensorFlow project. For further support and assistance in vulnerability remediation, you can reach out to DevNack.com.
See every vulnerability recorded for tensorflow-gpu →
FAQ
TensorFlow GPU is a package that enables GPU acceleration for TensorFlow computations, allowing users to leverage the power of GPUs for faster training and inference in machine learning models.
The vulnerability can lead to memory corruption and potentially enable an attacker to execute arbitrary code or cause a denial-of-service condition.
The vulnerability affects TensorFlow GPU versions prior to 2.7.0, including versions 2.6.1, 2.5.2, and 2.4.4.
No, there are no known workarounds for this vulnerability. It is recommended to apply the official fixes or upgrade to the patched versions of TensorFlow GPU.
For more information about this vulnerability, you can refer to the official advisory provided by the TensorFlow project.
References
Related vulnerabilities
Recent vulnerabilities recorded for tensorflow-gpu.
