TensorFlow up to 2.3.0 TFLite Model input validation

Summaryinfo

A vulnerability was found in TensorFlow up to 1.15.3/2.0.2/2.1.1/2.2.0/2.3.0. It has been rated as critical. The impacted element is an unknown function of the component TFLite Model Handler. Performing a manipulation results in input validation. This vulnerability is known as CVE-2020-15210. Remote exploitation of the attack is possible. No exploit is available. Upgrading the affected component is advised.

Detailsinfo

A vulnerability was found in TensorFlow up to 1.15.3/2.0.2/2.1.1/2.2.0/2.3.0 (Artificial Intelligence Software). It has been classified as critical. This affects an unknown function of the component TFLite Model Handler. The manipulation with an unknown input leads to a input validation vulnerability. CWE is classifying the issue as CWE-20. The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly. This is going to have an impact on confidentiality, integrity, and availability. The summary by CVE is:

In tensorflow-lite before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1, if a TFLite saved model uses the same tensor as both input and output of an operator, then, depending on the operator, we can observe a segmentation fault or just memory corruption. We have patched the issue in d58c96946b and will release patch releases for all versions between 1.15 and 2.3. We recommend users to upgrade to TensorFlow 1.15.4, 2.0.3, 2.1.2, 2.2.1, or 2.3.1.

The weakness was published 09/25/2020 (GitHub Repository). It is possible to read the advisory at github.com. This vulnerability is uniquely identified as CVE-2020-15210 since 06/25/2020. It is possible to initiate the attack remotely. No form of authentication is needed for exploitation. The technical details are unknown and an exploit is not publicly available.

Upgrading to version 1.15.4, 2.0.3, 2.1.2, 2.2.1 or 2.3.1 eliminates this vulnerability. Applying the patch d58c96946b is able to eliminate this problem. The best possible mitigation is suggested to be upgrading to the latest version.

Similar entries are available at VDB-162019, VDB-162018, VDB-162017 and VDB-162016. Be aware that VulDB is the high quality source for vulnerability data.

Productinfo

Type

• Artificial Intelligence Software

Name

• TensorFlow

Version

• 1.15.0
• 1.15.1
• 1.15.2
• 1.15.3
• 2.0
• 2.0.0
• 2.0.1
• 2.0.2
• 2.1
• 2.1.0
• 2.1.1
• 2.2
• 2.2.0
• 2.3.0

License

• free

Website

• Product: https://github.com/tensorflow/tensorflow/

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Be aware that VulDB is the high quality source for vulnerability data.

Discussion